padding-oracle-attacker
A CLI tool and library for executing padding oracle attacks with concurrent network requests and an elegant UI.
What is padding-oracle-attacker?
Padding Oracle Attacker is a CLI tool and library for executing padding oracle attacks against web applications. It automates the process of decrypting or encrypting data by exploiting vulnerabilities in cryptographic padding validation, with support for concurrent requests and customizable HTTP parameters. The tool helps security researchers identify and demonstrate weaknesses in implementations of encryption algorithms like AES-CBC.
Security researchers, penetration testers, and developers who need to test web applications for padding oracle vulnerabilities or educate others about cryptographic attacks.
It offers a fast, concurrent, and user-friendly alternative to existing padding oracle tools, with a clean CLI, detailed logging, and a flexible JavaScript API for integration into custom security workflows.
Overview
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
Use Cases
Best For
- Testing web applications for padding oracle vulnerabilities in CBC mode encryption
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
