Cybersecurity
Crypto
Web crypto exploitation — padding-oracle (Vaudenay), AES-CBC bit-flipping / IV manipulation, AES-ECB pattern attacks (cut-and-paste, prefix/suffix recovery), HMAC bypass, hash-length extension, JWT alg confusion. Covers detection signals, working in-file Python harnesses (concurrent.futures, timeout=5, python3 -u, bounded request budget), and the confirm-oracle gate that must fire before iteration.
- Publisher / source
- BitterSecurity/Decepticon (found on GitHub top repositories)
- Upstream record
- BitterSecurity/Decepticon
- Version
- Version 1
- Published
- Publication review
- Approved for publication
- Content fingerprint
519bea03b632f3b00917cbea412af6bfcc87384869f4b2c6a1d702f45c6ab16e