What problem does it solve? During authorized penetration tests, applications often encrypt request bodies, response fields, and signatures with AES, DES, or custom encoding, blocking parameter tampering and data analysis. This Skill turns ad-hoc guessing into a systematic workflow for identifying encryption schemes, extracting keys from JavaScript, and decrypting protected data. ## Core Features & Use Cases - Encrypted Field Detection: Pattern-match Base64, Hex, and JWT candidates in response bodies and flag suspicious field names like encrypt, sign, or payload. - Key and IV Extraction from JS: Locate CryptoJS, Node crypto, Web Crypto, JSEncrypt, and sm-crypto calls in JavaScript to recover hardcoded keys, IVs, and derivation logic. - AES Attack Chain: Identify CBC/ECB/GCM modes, detect ECB via duplicate ciphertext blocks, test for Padding Oracle behavior, and brute-force keys with a three-tier dictionary built from JS literals, leaked values, and common weak keys. - Use Case: An API returns {"data":"U2FsdGVkX18..."}. You extract the AES key from the site's JS bundle, decrypt the field to reveal a user object, change role to admin, re-encrypt, and demonstrate a privilege escalation finding. ## Quick Start Analyze the target site's JavaScript and API responses to identify the encryption scheme, extract the key, and decrypt the protected fields.
