What problem does it solve?
Web applications that encrypt cookies, tokens, or URL parameters with CBC-mode ciphers (AES-CBC/DES-CBC) may leak padding validity through differing error responses, and manually exploiting this oracle byte-by-byte is impractical. This Skill operationalizes PadBuster to automatically decrypt such ciphertexts and forge valid ciphertexts for arbitrary plaintexts.
Core Features & Use Cases
- Automated Decryption: Recover plaintext from encrypted cookies, URL parameters, or tokens by exploiting padding error responses, with support for Base64, hex, .NET UrlToken, and WebSafe Base64 encodings.
- Ciphertext Forgery: Craft valid encrypted values for attacker-chosen plaintexts, such as forging an admin session cookie like {"role":"admin","uid":1}.
- Advanced Handling: Custom error-string matching, URL prefix placement, IV-less ciphertexts (-noiv), verbose debugging, and resuming interrupted attacks from known intermediate values.
- Use Case: During an authorized penetration test you find an auth cookie that returns different responses for bad padding versus bad data; use this Skill to decrypt the cookie and then forge an admin session token.
Quick Start
Use the padbuster-padding-oracle skill to decrypt the Base64-encoded auth cookie from the target application and then forge a ciphertext for the plaintext admin.
