logo

OWASP Top 10: The Risk of Cryptographic Failures

ID: 7736c581-54ae-5e2d-93f8-811d0faaf0e1

STIX ID: report--7736c581-54ae-5e2d-93f8-811d0faaf0e1

Feed Name: HackerOne Blog

Date Published: 2024-11-27

Date Updated: 2026-06-12

...
...

An instructional briefing on fundamental cryptography and common cryptographic failures: it covers symmetric and asymmetric encryption, AES block modes (ECB vs CBC), padding and PKCS#7, padding-oracle attacks with an AES-CBC decoding walkthrough, a practical PortSwigger lab demonstrating an encryption/decryption oracle and admin cookie forgery, and hashing weaknesses including MD5 collisions and rainbow-table attacks; the document is educational and does not describe a specific active incident.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.