1
vote
I'm testing an app that uses only v4 UUIDs as a cookie for authentication. What are some attacks I can try?
A correctly generated v4 UUID is always cryptographically random, that's in the spec. Verifying this, short of looking at the source code, is difficult. There are tests you can run (e.g. Burp Suite's &...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
cryptography × 2294encryption × 834
hash × 308
tls × 216
passwords × 204
authentication × 191
aes × 135
public-key-infrastructure × 130
rsa × 105
certificates × 103
digital-signature × 100
key-management × 94
random × 90
openssl × 71
cryptanalysis × 64
asymmetric × 61
web-application × 60
key-exchange × 54
key-generation × 50
.net × 46
privacy × 44
protocols × 44
brute-force × 43
file-encryption × 41
salt × 41