CVE-2010-3332

This Ruby script exploits CVE-2010-3332, a vulnerability in ASP.NET's padding oracle attack, allowing decryption of sensitive data using chosen ciphertext techniques. It automates the discovery of block size, padding length, and decrypt commands.

This Ruby script is a proof-of-concept exploit for CVE-2010-3332, leveraging padding oracle attacks to decrypt and encrypt data in ASP.NET applications. It implements techniques like Vaudenay's CBC padding oracle and Rizzo-Duong CBC-R to exploit vulnerabilities in cryptographic implementations.

This exploit leverages a padding oracle vulnerability in ASP.NET to decrypt and download the Web.config file. It uses a brute-force approach to manipulate encrypted data and extract sensitive information.

This repository contains a functional Ruby exploit for CVE-2010-3332, which targets the Oracle Padding Vulnerability in Microsoft ASP.NET. The exploit implements Vaudenay's CBC padding oracle attack and Rizzo-Duong CBC-R technique to decrypt and encrypt data.