You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Bletchley is a tool to assist exploitation of crypto issues in web applications, we should investigate how to apply this both from a PoC perspective (external plugins, which assist manual exploitation) as well as grep, semi_passive and active plugins:
External plugins may include passing obfuscated data to bletchley's analyzer and piping the output to report.
But the main thing that can be done is to use the Bletchley's script generator for efficient automation of HTTP requests --> replay HTTP requests that are passed through Bletchley to analyse target responses.
Bletchley is a tool to assist exploitation of crypto issues in web applications, we should investigate how to apply this both from a PoC perspective (external plugins, which assist manual exploitation) as well as grep, semi_passive and active plugins:
https://code.google.com/p/bletchley/
The text was updated successfully, but these errors were encountered: