Padding Oracle Exploit Tool 1.0.0 demo. In minutes POET completely decrypts the VIewState of a JavaServer Faces application. The server is Apache MyFaces configured to use AES/CBC encryption with a random secret key and IV. POET uses Vaudenay's padding oracle attack to decrypt the web application client-side state byte by byte.
Download POET: http://netifera.com/research
Link to this comment:
Video Responses
All Comments (0)