Get real-world training at Pentest.TV:
→ Fundamentals Course ($25/mo): https://pentest.tv/courses/pentest-fundamentals-course/
→ Professionals Course + Mentoring ($99/mo): https://pentest.tv/courses/pentest-professional-course/
In this video, we examine cryptographic failures, specifically the failure to use encryption during remote communication. We will again demonstrate this by using the Damn Vulnerable Web Application (DVWA) tool.
This vulnerability is identified on the OWASP Top 10 as:
A
02:2021 - Cryptographic Failures
The weaknesses identified during this test is "previously known as Sensitive Data Exposure, which was broad symptom rather than a root cause. The renewed focus here is on failures related to cryptography which often leads to sensitive data exposure or system compromise."
Make sure to check out https://Pentest.TV for additional resources, including free ethical hacking courses. Happy Hacking!