Alert icon
We're changing our privacy policy. This stuff matters.  Learn more  Dismiss

Padding Oracle Exploit Tool vs Apache MyFaces

Loading...

Sign in or sign up now!
Alert icon
Upgrade to the latest Flash Player for improved playback performance. Upgrade now or more info.
23,526
Loading...
Alert icon
Sign in or sign up now!
Alert icon

Uploaded by on Jun 1, 2010

Padding Oracle Exploit Tool 1.0.0 demo. In minutes POET completely decrypts the VIewState of a JavaServer Faces application. The server is Apache MyFaces configured to use AES/CBC encryption with a random secret key and IV. POET uses Vaudenay's padding oracle attack to decrypt the web application client-side state byte by byte.

Download POET: http://netifera.com/research

Link to this comment:

Share to:
see all

All Comments (0)

Sign In or Sign Up now to post a comment!
Loading...

Alert icon
0 / 00Unsaved Playlist Return to active list
    1. Your queue is empty. Add videos to your queue using this button:
      or sign in to load a different list.
    Loading...Loading...Saving...
    • Clear all videos from this list
    • Learn more