Image: dev.to
Worked Proof shown
A padding oracle found in a deliberately flawed crypto app
Claude spotted the classic vulnerability during a security scan.
—
Credits
- Article author umair24171 Source ↗
Earliest dated source:
The full story
To test whether AI can catch subtle cryptographic flaws that static analysers miss, the author deliberately wrote broken AES code and ran it through commercial tools and Claude 3.5 Sonnet. Claude found a classic padding-oracle vulnerability and a subtle side-channel leak in the error handling.
How it was done
Tools
Themes
Loading themes…
Sources
From the maker's own write-up or code. We summarise what they report; we haven't tested it ourselves.
- DEV: Claude AI Crypto Vulnerability Scan: The Padding Oracle It FoundArticle author: umair24171Published
The write-up comparing Claude with other tools.