How do I use FeatherDuster to break a Base64 encoded cipher?

Import the ciphertext via file or command-line; FeatherDuster will automatically detect and decode Base64, then analyze it for vulnerabilities like weak ciphers using its built-in attack modules.

Is FeatherDuster better than John the Ripper for crypto analysis?

FeatherDuster focuses on automated cryptanalysis of weak ciphers and encodings, while John the Ripper is primarily a password cracker; use FeatherDuster for ciphertext analysis and John for hash cracking.

Can FeatherDuster handle AES encryption breaking?

It can detect properties like ECB mode or key reuse in AES, but doesn't perform brute-force attacks; it's best for exploiting implementation flaws rather than breaking strong encryption directly.

What Python version is required for FeatherDuster?

The README doesn't specify, but it's likely compatible with modern Python 3.x versions; check the repository for any version constraints in setup files or issues.

How to install FeatherDuster on Windows?

Use Python's pip or virtual environments as implied in the README; clone the GitHub repository and run the setup, but be aware of potential beta-related installation quirks.

Does FeatherDuster support real-time crypto analysis?

No, it's designed for offline analysis of ciphertexts; for real-time use, you'd need to integrate Cryptanalib into custom scripts, which may require additional development effort.

FeatherDuster

BSD-3-ClausePythonv0.2

An automated, modular cryptanalysis tool for identifying and exploiting weak cryptosystems.

GitHub

What is FeatherDuster?

FeatherDuster is an automated cryptanalysis tool that identifies and exploits weak cryptographic systems. It uses the Cryptanalib library to analyze ciphertexts, detect encodings, and perform attacks like breaking shift ciphers or padding oracles. The tool simplifies the process of finding and leveraging crypto vulnerabilities.

Target Audience

Security researchers, penetration testers, and developers working on cryptographic implementations who need to test for weaknesses.

Value Proposition

Developers choose FeatherDuster for its automation and modularity, allowing quick analysis of crypto systems without deep manual effort, and the reusable Cryptanalib library enables custom attack tooling.

Overview

An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

Use Cases

Best For

Automatically detecting weak ciphers in security assessments
Breaking simple ciphers like shift or transposition in CTF challenges

Related Projects

Community-curated · Updated weekly · 100% open source

Found a gem we're missing?

Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.

Submit a project Star on GitHub

1.1k stars129 forks0 contributors

Analyzing encoded ciphertexts (Base64, hex) from network traffic

Testing for cryptographic vulnerabilities like ECB mode or key reuse

Building custom cryptanalysis scripts with the Cryptanalib library

Identifying insufficient RSA parameters in cryptographic implementations

Not Ideal For

Production environments requiring stable, enterprise-grade cryptanalysis tools with guaranteed reliability
Advanced cryptographic research involving state-of-the-art or unbroken algorithms like post-quantum cryptography
Teams needing a graphical user interface or integration with non-Python ecosystems for cryptanalysis
Real-time analysis of network traffic or live systems where offline ciphertext processing is insufficient

Pros & Cons

Pros

Automated Vulnerability Detection

Automatically identifies encodings like Base64 and hex, and detects cryptographic weaknesses such as low entropy or ECB mode, as detailed in the analysis engine section.

Modular and Reusable Library

Cryptanalib can be used independently to build custom Python-based attack tools, with functions accessible via Python's help system for flexibility.

Broad Encoding Support

Recognizes and decodes multiple encodings including URL encoding and zlib compression, handling mixed samples to simplify analysis of varied ciphertext formats.

Diverse Attack Modules

Includes pre-built functions for breaking shift ciphers, padding oracles, and many-time pads, covering common weak cryptography scenarios highlighted in the features.

Cons

Beta Release Instability

The project is explicitly labeled as a beta release with the warning 'things may be broken,' making it unreliable for critical or production tasks.

Limited Cryptographic Scope

Focuses on weak or outdated ciphers and encodings, lacking support for analyzing modern, robust cryptographic systems beyond basic detections.

Sparse Documentation

Documentation relies primarily on Python's help function, which may be cryptic for users unfamiliar with cryptanalysis or the library's specific functions.

Frequently Asked Questions

Home

CTF

RSACTFTool

RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data

Stars6,922

Forks997

Last commit7 days ago

RSATool

rsatool can be used to calculate RSA and RSA-CRT parameters

Stars1,596

Forks266

Last commit1 year ago

xortool

A tool to analyze multi-byte xor cipher

Stars1,482

Forks183

Last commit11 months ago

Hash Extender

Hash Extender is a specialized security tool that automates hash length extension attacks, a cryptographic vulnerability affecting many common hash functions. It enables security researchers and penetration testers to exploit weaknesses in applications that improperly construct message authentication codes. ## Key Features - **Multi-Algorithm Support** — Attacks MD4, MD5, RIPEMD-160, SHA-0, SHA-1, SHA-256, SHA-512, and WHIRLPOOL hash functions. - **Flexible Input/Output Formats** — Handles raw, hex, HTML, and C-style string encodings for both data and signatures. - **Automated Padding Calculation** — Correctly handles block sizes, endianness, and length fields for each algorithm. - **Secret Length Discovery** — Supports brute-forcing unknown secret lengths with min/max ranges. - **Batch Testing** — Can test multiple hash algorithms simultaneously with table output. ## Philosophy Hash Extender aims to make complex cryptographic attacks accessible by automating the tedious and error-prone manual calculations involved in length extension attacks, allowing security professionals to focus on vulnerability discovery rather than implementation details.

Stars1,194

Forks195

Last commit1 year ago

#crypto

#exploit

#vulnerability-detection

#exploitation-framework