cryptographic-failures

Name: cryptographic-failures
Availability: InStock
Author: zhanglimao

Audit cryptographic implementations for weak algorithms, key management, and TLS vulnerabilities.

23|2|Updated Mar 13, 2026

Search Tags:#vulnerability assessment #penetration testing #encryption #cryptography #tls #key management

Ready to run

npx skills add https://github.com/zhanglimao/Abyss --skill cryptographic-failures

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: cryptographic-failures
Source: https://github.com/zhanglimao/Abyss/tree/main/skills/cryptographic-failures
Command: npx skills add https://github.com/zhanglimao/Abyss --skill cryptographic-failures

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses security risks arising from improper use of cryptography, helping to identify and mitigate vulnerabilities like weak encryption, insecure key management, and flawed data protection.

Core Features & Use Cases

Detects weak encryption algorithms: Identifies the use of outdated or insecure algorithms (e.g., DES, RC4, MD5).
Audits key management practices: Checks for hardcoded keys, weak key generation, and improper key storage.
Identifies transport layer vulnerabilities: Assesses TLS/SSL configurations for weaknesses like weak cipher suites or certificate issues.
Use Case: A penetration tester can use this skill to systematically find and exploit cryptographic failures in a web application, such as using a weak cipher suite to decrypt sensitive traffic or exploiting a hardcoded API key.

Quick Start

Use the cryptographic-failures skill to audit the TLS configuration of api.example.com.

Frequently Asked Questions about cryptographic-failures

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit TLS configuration for weak cipher suites and certificate validation issues?▼

To audit TLS configuration, this Skill evaluates transport layer security to identify weak cipher suites, insecure protocols, and improper certificate validation. It systematically checks for vulnerabilities like deprecated SSL/TLS versions and flawed certificate chains.

What are common cryptographic vulnerabilities in web applications?▼

Common cryptographic vulnerabilities include weak encryption algorithms like DES, RC4, and MD5, alongside hardcoded API keys and improper key storage. These failures in encryption and key management expose sensitive data to unauthorized access and decryption.

How do I check for hardcoded keys and insecure key management practices?▼

Checking for hardcoded keys requires auditing key management practices to detect hardcoded credentials, weak key generation, and improper storage. This Skill systematically scans implementations to identify these cryptographic failures and assess key handling security.

Can I use this for penetration testing to exploit weak encryption algorithms?▼

Yes, you can use this for penetration testing to systematically find and exploit cryptographic failures. It helps identify vulnerabilities like weak cipher suites used to decrypt sensitive traffic or hardcoded API keys during security assessments.

Does this cryptographic audit cover outdated algorithms like DES and RC4?▼

Yes, this cryptographic audit detects weak encryption algorithms including DES, RC4, and MD5. It identifies outdated or insecure algorithms across systems and protocols to help mitigate vulnerabilities arising from improper encryption usage.