BaCde：这个视频时我在Youtub上下载下来的，传到了优酷上。是关于Padding Oracle Attack攻击的视频。如果不了解的，大家可以百度Google一下相关信息。以下我简单整理了一些相关资料和工具。播放视频地址和一些资源如下：
看视频也可以到我的博客去看！
567K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3S2A6i4K6u0W2j5X3q4A6k6s2g2Q4x3X3g2U0L8$3#2Q4x3V1k6B7j5X3W2F1k6$3S2W2i4K6u0r3j5X3I4G2k6#2)9J5c8X3W2@1k6h3#2Q4x3V1j5$3y4e0R3#2k6e0c8V1j5K6x3H3k6o6R3$3j5$3t1J5j5$3x3I4x3e0j5$3j5K6q4Q4x3X3g2Z5N6r3#2D9

5a8K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4k6Q4x3X3g2&6L8%4g2C8N6g2)9J5k6h3y4G2L8g2)9J5c8Y4k6Q4y4h3k6K6K9r3!0%4i4K6u0r3K9h3c8Q4y4h3k6j5e0h3A6c8P5V1&6f1j5%4W2z5K9V1p5@1i4K6u0W2K9s2c8E0L8l9`.`.

*

一些关于该攻击的资源

7eeK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3y4D9L8%4g2V1i4K6u0W2j5%4y4V1L8W2)9J5k6h3&6W2N6q4)9J5c8X3q4Q4x3V1j5J5x3o6p5H3i4K6u0r3x3e0t1K6x3q4)9J5c8U0t1^5z5e0p5#2y4q4)9J5k6h3S2@1L8h3H3`. 2010年度最有技术含量攻击：Padding Oracle Attack

5b9K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4g2K6k6h3&6A6P5q4)9J5k6h3!0J5k6#2)9J5c8X3g2$3k6h3&6@1M7#2)9J5c8Y4N6G2L8%4b7I4x3q4)9J5c8Y4c8W2j5$3S2Q4x3V1k6X3N6h3I4D9i4K6g2X3M7r3q4H3k6i4u0K6i4K6u0r3f1X3W2*7P5X3!0Q4x3X3g2H3k6r3k6Q4x3U0k6F1j5Y4y4H3i4K6y4n7  Practical Padding Oracle Attacks

e9eK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3N6V1M7%4y4W2j5%4g2J5K9i4c8&6i4K6u0W2j5$3!0E0i4K6u0r3L8q4)9J5c8X3u0Q4x3V1j5J5x3o6p5H3i4K6u0r3x3o6W2Q4x3V1j5I4y4q4)9J5c8X3q4#2N6r3!0E0j5i4c8W2k6q4)9J5k6s2m8S2k6r3c8A6L8X3N6Q4x3X3c8G2M7X3q4U0L8r3g2Q4x3X3c8S2N6s2c8S2j5$3E0K6i4K6u0V1N6$3W2@1K9q4)9J5k6s2m8S2k6r3u0#2M7%4c8W2M7W2)9J5c8R3`.`. Automated Padding Oracle Attacks with PadBuster

197K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3W2K6k6#2)9J5k6i4u0Z5N6h3I4Q4x3X3g2S2j5#2)9J5k6i4g2C8i4K6u0r3i4K6N6q4K9%4m8Q4x3V1k6K6k6h3y4J5k6i4c8u0g2W2)9J5k6i4m8V1k6R3`.`. Padding Oracle Attacks on CBC-mode Encryption with Secret and Random IVs

9eeK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3I4A6L8h3W2@1k6h3c8Q4x3X3c8W2L8Y4c8J5L8%4m8&6i4K6u0W2j5$3!0E0i4K6u0r3M7r3q4V1k6r3W2F1k6#2)9J5k6r3!0J5j5h3y4D9k6g2)9J5k6r3q4@1N6r3q4U0K9%4x3`. Understanding Padding Oracle attacks

国内的2篇文章（有一篇译文）

4dcK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3u0D9L8$3N6Q4x3X3g2*7K9r3q4G2K9X3W2W2i4K6u0W2L8h3g2Q4x3V1j5J5x3o6p5H3i4K6u0r3x3e0m8Q4x3V1k6H3j5h3c8V1K9h3&6Y4i4K6u0V1L8%4u0S2j5$3I4W2i4K6u0V1j5i4c8@1j5h3y4C8i4K6u0V1K9h3&6Q4x3X3c8V1k6i4c8S2K9h3I4Q4x3X3g2Z5N6r3#2D9i4K6t1$3L8X3u0K6M7q4)9K6b7W2)9J5y4X3&6T1M7%4m8Q4x3@1u0b7j5h3c8V1K9h3&6Y4 Oracle Attack实例分析（该文为译文）

ddfK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3u0D9L8$3N6Q4x3X3g2*7K9r3q4G2K9X3W2W2i4K6u0W2L8h3g2Q4x3V1j5J5x3o6p5H3i4K6u0r3x3o6W2Q4x3V1k6@1K9r3W2F1k6%4y4Q4x3X3c8S2j5X3!0#2N6q4)9J5k6s2m8S2k6r3c8A6L8X3N6Q4x3X3c8G2M7X3q4U0L8r3g2Q4x3X3c8$3N6h3I4F1k6i4u0S2j5X3W2D9K9i4c8&6i4K6u0V1K9h3&6Q4x3X3c8S2M7%4m8Q4x3X3c8F1k6i4c8Q4x3X3g2Z5N6r3#2D9 浅谈这次ASP.NET的Padding Oracle Attack相关内容

下附一些利用工具

padBuster.pl 这个就是视频里用到的那个工具了，pl的，需要安装perl

Poet   这个工具有系统的版本有mac下的，有linux 64位版的，有linux32位版的。也有windows版本的

b51K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3&6W2N6r3W2X3k6i4u0S2i4K6u0W2j5$3!0E0i4K6u0r3k6r3!0%4L8X3I4G2j5h3c8Q4x3V1k6H3L8$3g2@1i4K6u0r3M7r3!0W2N6q4)9J5k6o6q4Q4x3X3f1H3i4K6u0W2x3g2)9J5k6r3I4A6L8Y4g2^5i4K6u0V1P5o6R3$3i4K6g2X3j5h3#2V1y4U0c8Q4x3X3g2B7j5i4u0Q4x3U0k6F1j5Y4y4H3i4K6y4n7     linux64位的

218K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3&6W2N6r3W2X3k6i4u0S2i4K6u0W2j5$3!0E0i4K6u0r3k6r3!0%4L8X3I4G2j5h3c8Q4x3V1k6H3L8$3g2@1i4K6u0r3M7r3!0W2N6q4)9J5k6o6q4Q4x3X3f1H3i4K6u0W2x3g2)9J5k6r3I4A6L8Y4g2^5i4K6u0V1P5o6R3$3i4K6g2X3j5h3#2V1y4U0c8Q4x3X3g2B7j5i4u0Q4x3U0k6F1j5Y4y4H3i4K6y4n7i4K6t1$3L8X3u0K6M7q4)9K6b7X3I4A6L8Y4g2^5i4@1f1@1i4@1t1^5i4K6S2n7x3K6u0Q4c8e0c8Q4b7V1c8Q4z5p5c8Q4c8e0N6Q4z5f1q4Q4z5o6b7`.

7faK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3&6W2N6r3W2X3k6i4u0S2i4K6u0W2j5$3!0E0i4K6u0r3k6r3!0%4L8X3I4G2j5h3c8Q4x3V1k6H3L8$3g2@1i4K6u0r3M7r3!0W2N6q4)9J5k6o6q4Q4x3X3f1H3i4K6u0W2x3q4)9J5k6s2N6A6L8U0x3J5i4K6u0V1P5o6R3$3i4K6u0W2K9X3q4J5i4K6t1$3L8X3u0K6M7q4)9K6b7R3`.`.    windows下32位的

031K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3&6W2N6r3W2X3k6i4u0S2i4K6u0W2j5$3!0E0i4K6u0r3k6r3!0%4L8X3I4G2j5h3c8Q4x3V1k6H3L8$3g2@1i4K6u0r3f1r3!0W2N6q4)9J5k6h3c8E0k6#2)9J5y4X3&6T1M7%4m8Q4x3@1t1`.    mac下的

[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课