search

OWASP / SecurityShepherd

Web and mobile application security training platform
https://owasp.org/www-project-security-shepherd/
GNU General Public License v3.0
1.33k stars 450 forks source link

Mobile Insufficient Transport Layer Protection #72

Open SeanDuggan opened 10 years ago

SeanDuggan commented 10 years ago

Lesson Send the key using basic Auth (encoded)

Challenge 1 Encrypt the data but the key is on the device

challenge 2 Encrypt the data but the key is hard coded in the code

Challenge 3 encrypt the data and the key is at the end of the string