Web Security

Cryptographic Failures

Passwords stored in plaintext, sensitive data sent over HTTP, weak encryption keys, MD5 where bcrypt should be. Learn what goes wrong when applications mishandle cryptography.

Beginner40 min6 lessons1 hands-on

Start free →I have an account

First lesson free. The full module is part of Pro.

You'll be able to

✓Identify when sensitive data is transmitted or stored without encryption
✓Recognise weak or outdated cryptographic algorithms (MD5, SHA-1, DES)
✓Understand why HTTPS alone does not protect against all crypto failures
✓Find cleartext secrets in headers, cookies, and API responses

Lessons

1117 Million Passwords — Sold for $2,200
2What are Cryptographic Failures?
3Finding Cryptographic Failures
4Mini Lab — Password Hash Triage
5Tool — hashcat
6Your Turn: Spot the WeaknessHANDS-ON

Start free →