Identify and analyze cryptographic weaknesses in web applications.
npx skills add https://github.com/wgpsec/AboutSecurity --skill crypto-web-attack
Please help me install this Agent Skill. Skill: crypto-web-attack Source: https://github.com/wgpsec/AboutSecurity/tree/main/skills/exploit/crypto-web-attack Command: npx skills add https://github.com/wgpsec/AboutSecurity --skill crypto-web-attack
Web 应用中的密码学攻击需要理解实现缺陷并在安全研究或评估中复现以改进防护。
Analyze a sample cryptographic vulnerability scenario and generate a defense plan.
High-intent search queries and answers about installing and using this skill.
A padding oracle attack exploits server-side error responses to decrypt encrypted web cookies byte by byte. You analyze padding validation behaviors to iteratively recover plaintext without knowing the key.
CBC bit-flip modifies ciphertext bits to alter the corresponding plaintext block in session tokens. By flipping specific bits in the previous ciphertext block, you change the decrypted plaintext to forge desired values.
Yes, you can test hash length extension attacks against Flask session signatures. This technique appends data to a signed message by exploiting weak MAC constructions to forge valid tokens without the secret key.
The best way to assess web application cryptographic resilience is analyzing predictable tokens and encryption flaws using mock targets. This validates vulnerabilities safely while proposing robust defense plans without exposing real secrets.
Predictable tokens compromise signature validation because attackers can guess or enumerate token values to bypass authentication. Analyzing these cryptographic weaknesses reveals how insufficient randomness allows session forgery and unauthorized access.
KanTrunAutomate browser tasks with Puppeteer CLI scripts and JSON outputs.
ginkidaGuide secure cryptographic design, TLS, and key management with audited libraries.
uphiagoDetect FastAPI-specific vulnerabilities including OpenAPI schema exposure and DI authorization gaps.
bpnrockstarDetect missing rate limiting and brute force enumeration vulnerabilities in web applications.
