skills.rest
jinyimeng01
jinyimeng01COMMUNITY
Explore all skills by this author →
GitHub

crypto-attack-agent

Analyze encrypted application data to identify cryptographic security weaknesses.

54|5|Updated May 9, 2026
Search Tags:#jwt#security testing#cryptography#api security#javascript reverse engineering#encryption analysis
One-click install
npx skills add https://github.com/jinyimeng01/mastermind-bug-bounty --skill crypto-attack-agent
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: crypto-attack-agent
Source: https://github.com/jinyimeng01/mastermind-bug-bounty/tree/main/agents/crypto_attack
Command: npx skills add https://github.com/jinyimeng01/mastermind-bug-bounty --skill crypto-attack-agent

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security researchers analyze encrypted application data, reverse-engineer cryptographic implementations, and identify weaknesses that block authorized security assessments.

Core Features & Use Cases

  • Cryptographic Analysis: Detect encryption patterns, identify algorithms, extract keys and IVs, and analyze CryptoJS, AES, DES, RSA, and custom encoding implementations.
  • Attack Workflow Support: Guide JWT analysis, signature validation testing, encrypted payload inspection, and recovery of useful security testing data for bug bounty workflows.
  • Use Case: A security tester can use this Skill to examine a web application's JavaScript and API responses, identify encrypted fields, understand their protection mechanisms, and document findings during an authorized assessment.

Quick Start

Use the crypto attack skill to analyze the provided application data for encryption patterns, keys, algorithms, and JWT security issues.

Frequently Asked Questions about crypto-attack-agent

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I analyze encrypted application data and identify cryptographic security weaknesses?▼

To analyze encrypted application data, apply automated workflows to detect encryption patterns, identify algorithms like AES or RSA, extract keys and IVs, and validate security issues within authorized testing scenarios.

What is the best way to reverse engineer JavaScript to find CryptoJS encryption implementations?▼

Reverse engineering JavaScript to find CryptoJS implementations involves inspecting web application client-side code to detect custom encoding, analyze encryption patterns, and extract cryptographic parameters for security validation.

How does JWT analysis work for API security testing?▼

JWT analysis for API security testing works by inspecting JSON Web Tokens to test signature validation, assess token security mechanisms, and document findings during authorized bug bounty assessments.

Can I extract encryption keys and IVs from API responses during an authorized assessment?▼

Yes, you can extract encryption keys and IVs from API responses by inspecting encrypted request and response data, identifying the applied cryptographic algorithms, and recovering testing data.

Does this approach support testing custom encoding implementations alongside standard AES and DES algorithms?▼

Yes, this approach supports testing custom encoding implementations alongside standard AES and DES algorithms by detecting varied cryptographic patterns and analyzing their specific protection mechanisms.

Related Skills

Explore More Software Engineering Skills→
huseyindenizhuseyindeniz
15

security-audit

Analyze TypeScript/JavaScript source code for hardcoded secrets and unsafe patterns.

Community
Advanced
balsm-healthbalsm-health
2

testing-jwt-token-security

Test JWT tokens for cryptographic weaknesses, algorithm confusion, and authorization bypass.

Official
Advanced
zebbernzebbern
4.5k

Burp Suite Web Application Testing

Automate Burp Suite web application security testing across intercept, modify, scan, and manual workflows.

Community
Advanced
jinyimeng01jinyimeng01
54

crypto-attack

Analyze encrypted application data to identify cryptographic implementations and reverse engineering opportunities.

Community
Advanced