Browse / Cryptography

Cryptography

See it on the mapBypass libraryPayloads

Weaknesses in this class

• Cryptographic Issues - Generic223
• Improper Certificate Validation69
• Man-in-the-Middle33
• Use of a Broken or Risky Cryptographic Algorithm14
• Missing Required Cryptographic Step11
• Improper Validation of Certificate with Host Mismatch8
• Inadequate Encryption Strength7
• Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)6
• Use of Hard-coded Cryptographic Key5
• Use of Insufficiently Random Values5
• Improper Check for Certificate Revocation5
• Reusing a Nonce, Key Pair in Encryption4
• Use of a Key Past its Expiration Date4
• Improper Verification of Cryptographic Signature3
• Reliance on Reverse DNS Resolution for a Security-Critical Action2
• Exploiting Incorrectly Configured SSL/TLS2
• Insufficient Verification of Data Authenticity1
• Reversible One-Way Hash1
• Improper Validation of Certificate Expiration1
• Improper Following of a Certificate's Chain of Trust1

Most upvoted Cryptography reports

AllValidInformativeN/ADuplicate

1. Infromation Disclosure To Use of Hard-coded Cryptographic KeyDuplicateUse of Hard-coded Cryptographic Key · medium · Reddit
   238 votes
2. Sauce Labs API key unencrypted in an old commitDuplicateUse of Hard-coded Cryptographic Key · medium · Ruby on Rails
   23 votes
3. The Microsoft Store Uber App Does Not Implement Certificate PinningDuplicateImproper Certificate Validation · critical · Uber
   7 votes
4. Missing Certificate Authority Authorization ruleDuplicateCryptographic Issues - Generic · Gratipay
   5 votes
5. Certificate signed using SHA-1DuplicateCryptographic Issues - Generic · medium · Gratipay
   3 votes
6. SSl Weak CiphersDuplicateCryptographic Issues - Generic · low · Gratipay