Detect weak algorithms, padding, and key management flaws in TLS and JWT configurations.
npx skills add https://github.com/brucesongs/kali-claw --skill crypto-attacks
Please help me install this Agent Skill. Skill: crypto-attacks Source: https://github.com/brucesongs/kali-claw/tree/main/skills/crypto-attacks Command: npx skills add https://github.com/brucesongs/kali-claw --skill crypto-attacks
Cryptographic failures in implementations and configurations undermine encryption, integrity checks, and auth tokens, enabling data compromise or unauthorized access.
Begin by reviewing the included payloads.md, test-cases.md, and guides to start practical cryptographic security testing in a lab.
High-intent search queries and answers about installing and using this skill.
Test JWT risks and padding oracle attacks by applying included payloads and test cases against sample targets. This process detects cryptographic misconfigurations and key management flaws to validate defenses safely.
A hash length extension attack exploits weak algorithms to append data to hashed messages without knowing the secret key. This undermines integrity checks by generating valid signatures for altered payloads.
Yes, performing cryptanalysis requires a working cryptography toolkit including openssl, hashcat, padbuster, and jwt_tool. These tools execute test cases and payloads to detect weak algorithms across TLS protocols.
Weak key management causes cryptographic failures by exposing encryption keys or using insufficient entropy. This undermines encryption and auth tokens, enabling unauthorized access and data compromise across APIs.
Yes, you can analyze TLS configurations to detect weak ciphers using the included guides and test cases. This identifies misconfigurations that undermine encryption and validates defenses safely.
blacklanternsecurityCrack password hashes and encrypted files using hashcat and john.
kiwamizamuraiIdentify cryptographic schemes and decrypt ciphertext with Ciphey and targeted attacks.
ArianHobson333Identify subdomains, ports, endpoints, APIs, and attack surfaces.
mlvpatelOrchestrate seven-phase application security testing from intake to report.
