---
id: 202
title: "Hacking Crypto Part IV: Web and mobile applications"
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/hacking-crypto-part-iv-web-and-mobile-applications/"
published_at: "2025-12-18 13:00"
tags: ["ai-security", "web-security", "cryptography", "mobile-security", "jwt", "padding-oracle", "iv", "hardcoded-keys"]
phying_url: "https://phying.com/item/202"
lang: en
---

# Hacking Crypto Part IV: Web and mobile applications

## Summary

The final Hacking Cryptography installment covers JWT signature flaws, weak token and key generation, hardcoded keys, padding oracles, and improper IV use in web and mobile apps.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **Published:** 2025-12-18 13:00
- **Original:** https://www.bugcrowd.com/blog/hacking-crypto-part-iv-web-and-mobile-applications/
- **Phying News:** https://phying.com/item/202