Uploaded October 2021 | Updated September 2026, 2 weeks ago

---

In this video we are exploring a theoretical security product that automagically encrypts user data securely. But it has a fundamental design flaw which can be exploited.

LEARN ON HEXTREE (ad)
Learn hacking on Hextree: hextree.io
Watch this video and more on Hextree: app.hextree.io/courses/yt-cryptography/classic-encryption
Join the Hextree Discord: discord.gg/xgQpCQCpvy

Challenge Files: github.com/LiveOverflow/ctf-cryptowaf

Walkthrough: youtube.com/watch?v=ZKrABs-N9wA
BugBountyReportsExplained: youtube.com/c/BugBountyReportsExplained

CHAPTERS
00:00 - Intro
01:33 - Background Story
02:55 - What is CryptoWAF?
04:16 - Implementing Encryption
05:06 - Encryption Challenges
07:02 - Design Flaw
08:26 - Exploiting the Design Flaw
09:06 - Leaking Database
10:04 - WAF Bypass
11:04 - Conclusion
12:07 - Outro

SUPPORT
Per video: patreon.com/join/liveoverflow
Per month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): shop.liveoverflow.com

WATCH, FOLLOW & READ
Second channel: youtube.com/LiveUnderflow
Twitch: twitch.tv/LiveOverflow
Twitter: twitter.com/LiveOverflow
Instagram: instagram.com/LiveOverflow
TikTok: tiktok.com/@liveoverflow_
LiveOverflow blog: liveoverflow.com
Hextree blog (ad): hextree.io/blog

#BugBounty #CTF #LiveOverflow

(ad) LiveOverflow YouTube channel is supported by advertisement and product placement.