Nov. 24, 2023, 6:39 p.m. | /u/Beingkrishey

cybersecurity www.reddit.com

I'm new to pentesting and the application which I'm testing currently has request and response encrypted at the application layer. Trying to decrypt it, but no luck.

Update: Got the key, but I think getting the IV is near to impossible as it is randomly generated. Is there any chance left ?

Context: The dev team is too lazy to fix the vulnerabilities and what they do is encrypt all the requests and responses in the application layer itself. When …

application application layer cybersecurity decrypt encrypted generated key near pentesting request response testing the key update

Cyber Security Engineer

@ ASSYSTEM | Bridgwater, United Kingdom

Security Analyst

@ Northwestern Memorial Healthcare | Chicago, IL, United States

GRC Analyst

@ Richemont | Shelton, CT, US

Security Specialist

@ Peraton | Government Site, MD, United States

Information Assurance Security Specialist (IASS)

@ OBXtek Inc. | United States

Cyber Security Technology Analyst

@ Airbus | Bengaluru (Airbus)