cryptographic-failures

What problem does it solve?

This Skill addresses security risks arising from improper use of cryptography, helping to identify and mitigate vulnerabilities like weak encryption, insecure key management, and flawed data protection.

Core Features & Use Cases

• Detects weak encryption algorithms: Identifies the use of outdated or insecure algorithms (e.g., DES, RC4, MD5).
• Audits key management practices: Checks for hardcoded keys, weak key generation, and improper key storage.
• Identifies transport layer vulnerabilities: Assesses TLS/SSL configurations for weaknesses like weak cipher suites or certificate issues.
• Use Case: A penetration tester can use this skill to systematically find and exploit cryptographic failures in a web application, such as using a weak cipher suite to decrypt sensitive traffic or exploiting a hardcoded API key.

Quick Start

Use the cryptographic-failures skill to audit the TLS configuration of api.example.com.