wstg-cryp-04

name	wstg-cryp-04
description	Testing for Weak Encryption
category	cryptography
owasp_id	WSTG-CRYP-04
version	1.0.0
author	cyberstrike-official
tags	["cryptography","tls","ssl","encryption","wstg","cryp"]
tech_stack	[]
cwe_ids	["CWE-327"]
chains_with	[]
prerequisites	[]
severity_boost	{}

wstg-cryp-04

Test ID

WSTG-CRYP-04

Test Name

Testing for Weak Encryption

High-Level Description

Weak encryption can occur through the use of outdated algorithms, insufficient key lengths, improper implementation, or predictable initialization vectors. This test identifies cryptographic weaknesses in data encryption at rest and in transit within the application.

---

What to Check

• Encryption algorithm strength
• Key length adequacy
• IV/nonce randomness
• ECB mode usage
• Hardcoded keys
• Custom crypto implementations
• Hash algorithm strength

---

How to Test

Step 1: Identify Encrypted Data

# Look for encrypted/hashed data in:
# - Cookies
# - Database exports
# - API responses
# - Configuration files
# - URL parameters

# Check for common weak hash patterns
# MD5: 32 hex characters
# SHA1: 40 hex characters

# Check password storage
curl -s "https://target.com/api/user/export" | \
    grep -oP '[a-f0-9]{32}' | head -5  # Potential MD5

Step 2: Analyze Encryption Patterns

#!/usr/bin/env python3
import base64
import re

class EncryptionAnalyzer:
    def __init__(self):
        self.findings = []

     ():
        
        ()

        
        :
            decoded = base64.b64decode(data)
            ._analyze_decoded(decoded)
        :
            

        
        ._check_ecb_patterns(data)

     ():
        
        
         (data) %  == :
            ()
         (data) %  == :
            ()

        
        blocks = [data[i:i+]  i  (, (data), )]
         (blocks) != ((blocks)):
            ()
            .findings.append({
                : ,
                : 
            })

     ():
        
        
        chunks = [data[i:i+]  i  (, (data), )]

         (chunks) != ((chunks))  (chunks) > :
            ()

     ():
        
        hash_len = (hash_value)

        hash_types = {
            : ,
            : ,
            : ,
            : ,
        }

         hash_len  hash_types:
            hash_type = hash_types[hash_len]
            ()

               hash_type:
                .findings.append({
                    : ,
                    : 
                })

     ():
        
        patterns = [
            ,
            ,
            ,
        ]

         pattern  patterns:
            matches = re.findall(pattern, source_code, re.IGNORECASE)
               matches:
                ()
                .findings.append({
                    : ,
                    : 
                })


analyzer = EncryptionAnalyzer()
analyzer.analyze_ciphertext()
analyzer.analyze_hash()