Collaborate Disseminate
I’d like to hash email addresses with the same salt to make the hash searchable\indexable and make it hard to figure out the actual data. I wanted to use bcrypt, but I found that from PHP 7 custom salt is not supported by the password_hash… Continue reading PHP 7+ custom salt hashing algorithm [closed]
I would like to map strings of arbitrary length to hashes of 10 character length.
The length of the alphabet is of 64 characters (0-9, A-Z, a-z, _, -).
Obviously 2 same strings must produce the same hash.
I have the following doubts:
I would like to map strings of arbitrary length to hashes of 10 character length.
The length of the alphabet is of 64 characters (0-9, A-Z, a-z, _, -).
Obviously 2 same strings must produce the same hash.
I have the following doubts:
One of the banks uses this method of incomplete password validation – where you are only required to enter some random characters of the password – as shown here
It got me thinking:
how do they do this safely? are there any algorithms fo… Continue reading Password hashing and validation with only some subset of characters [duplicate]
I am new to type juggling attacks in PHP, and only just encountered a magic hash exploit in a war game recently.
Could someone explain why the below PHP code evaluates to true?
I understand that the ‘e’ letter for exponent causes PHP to th… Continue reading Type juggling in PHP [migrated]
I am working on the following war game from Defend The Web, which requires me to do a source code review to login as the user memtash. The code is on GitLab here.
Here is my methodology:
Reset the password for user memtash which causes me… Continue reading Crashing the sha1() function in PHP?
I’m using mimikatz to retrieve a user’s password hashes from Active Directory with the following command:
lsadump::dcsync /user:mimikatz
The user’s password is Pa55w.rd.
The output is
…
Credentials:
Hash NTLM: 377565f7d41787414481a283… Continue reading Why do I see LM hashes stored in Active Directory?
We were going to write, “Once more unto the breach, dear friends, once more”… but it seems to go without saying these days. Continue reading GoTo admits: Customer cloud backups stolen together with decryption key
https://sha256.web-max.ca/index.php#enter
This Website can reverse sha256.
So how is it that it is supposedly a "irreversible one-way function"?
I recently discovered that Patreon uses hash, but what is it?
When I searched it up, I found:
"bcrypt is a password-hashing function designed by Niels Provos and David Mazières, based on the Blowfish cipher and presented at USENIX in … Continue reading How does hash work? [duplicate]