padbuster
Script for performing Padding Oracle attacks
defense-evasionRed Team
Matches ATT&CK tactic: Stealth ↗
Tooldefense-evasionredLinuxKali LinuxPlatforms: Linux · Last verified September 6, 2026
PadBuster is a Perl script for automating Padding Oracle Attacks. PadBuster provides the capability to decrypt arbitrary ciphertext, encrypt arbitrary plaintext, and perform automated response analysis to determine whether a request is vulnerable to padding oracle attacks.
Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.
Getting started
Install on Kali Linux with `sudo apt install padbuster`. See the official Kali tool page and upstream homepage linked above for full usage and configuration details.
