Cryptographic attacks are often in the realm of theory. Many long known attack techniques in the cryptographic world have no corresponding practical tooling or weaponized exploit. Because of the nature of cryptography, encrypted data is often (and should be) indistinguishable from random data. This presents certain unique challenges when attempting to build crypto flaw scan or attack tools. This talk will discuss several cryptographic flaws, how they manifest in web applications, how to find them, and will discuss newly developed crypto attack tools to be released alongside the talk.