[Owasp-cincinnati] program to break weak encryption

Tue Sep 2 09:43:11 EDT 2008

Hi there, 

Is there any program that can break weak encryption?

For example, the WebGoat lesson "Weak Authentication" uses weak
encryption for a authentication cookie (see below). I wonder if there is
any program that would take these input, guess the encryption algorithm,
and show the encrypted value for some additional given input. This is
not just a brute-force attack, the program would try to figure out
encryption algorithm. I do not know if anyone has a link to such sites
or program.

65432ubphcfx  for  webgoat

65432udfqtb    for   aspect

Thanks, 

Yan Zhou

Confidentiality Notice: The information contained in this electronic transmission is confidential and may be legally privileged. It is intended only for the addressee(s) named above. If you are not an intended recipient, be aware that any disclosure, copying, distribution or use of the information contained in this transmission is prohibited and may be unlawful. If you have received this transmission in error, please notify us by telephone (513) 229-5500 or by email (postmaster at MedPlus.com). After replying, please erase it from your computer system.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/owasp-cincinnati/attachments/20080902/0a4d144f/attachment.html 