Visualizing the Padding Oracle Attack

Here is a visualization of the Oracle Padding Attack in Javascript.

This visualization is “live” — a secret string is encrypted using the browser’s crypto API: