skills.rest
allsmog
allsmogCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

Cryptographic Failures

Detects cryptographic failures including weak hashing algorithms and insecure encryption across multiple languages.

22|3|Updated Feb 23, 2026
Search Tags:#security#vulnerability#encryption#cryptography#secrets#hashing
One-click install
npx skills add https://github.com/allsmog/vuln-scout --skill cryptographic-failures-allsmog
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Cryptographic Failures
Source: https://github.com/allsmog/vuln-scout/tree/main/whitebox-pentest/skills/cryptographic-failures
Command: npx skills add https://github.com/allsmog/vuln-scout --skill cryptographic-failures-allsmog

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill identifies and helps remediate common and critical cryptographic vulnerabilities in code, such as weak encryption algorithms, hardcoded secrets, and insecure random number generation.

Core Features & Use Cases

  • Vulnerability Detection: Scans code for known weak cryptographic practices across multiple languages.
  • Secure Alternatives: Provides guidance on modern, secure cryptographic alternatives.
  • Use Case: A developer is unsure if their password hashing mechanism is secure. This skill can be used to audit the implementation and suggest using bcrypt or Argon2 instead of outdated methods like MD5.

Quick Start

Audit the codebase for any instances of weak hashing algorithms like MD5 or SHA1.

Frequently Asked Questions about Cryptographic Failures

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan source code for weak hashing algorithms and insecure encryption?▼

To detect cryptographic failures in source code, this Skill scans for weak hashing algorithms, insecure encryption methods, and hardcoded secrets across Python, Java, Go, PHP, and TypeScript.

What are OWASP A04:2025 cryptographic failures and how do I identify them?▼

OWASP A04:2025 cryptographic failures include weak encryption, hardcoded secrets, and predictable random number generation. This Skill identifies these vulnerabilities by matching known insecure patterns in your codebase.

Can I detect hardcoded secrets and predictable random number generation in Python and Java?▼

Yes, you can detect hardcoded secrets and predictable random number generation in Python and Java. The Skill flags these insecure implementations and provides secure cryptographic alternatives.

What is the best way to replace outdated password hashing mechanisms like MD5?▼

The best way to replace outdated password hashing like MD5 is to audit the implementation and adopt modern algorithms. This Skill detects weak hashing and recommends secure alternatives such as bcrypt or Argon2.

Does this cryptographic vulnerability detection support Go, PHP, and TypeScript codebases?▼

Yes, cryptographic vulnerability detection supports Go, PHP, and TypeScript codebases. It flags weak encryption methods and hardcoded secrets while providing secure alternatives for these languages.

Related Skills

Explore More Software Engineering Skills→
zhongjiszhongjis

ast-grep

Search code with AST patterns and refactor across JavaScript, TypeScript, Python, and Go files.

Community
Intermediate
DevelopersCoffeeDevelopersCoffee
3

cwe-328-weak-hash-algorithm

Replace MD5 and SHA1 with SHA-256, BCrypt, or Argon2 in Java code.

Official
Intermediate
Hack23Hack23
235

secrets-management

Enforce environment-based configuration and rotation policies for credentials.

Official
Advanced
supermalangsupermalang

perf-measure

Measure application performance against explicit budgets with runtime tools.

Community
Advanced