Collaborate Disseminate
There is a bug bounty website, I can download any file uploaded on it, including files of other users. However, I need to know the md5 hash of a file to download it.
The uploaded files can be any type: images, pdf, video, audio, doc, etc.
… Continue reading Can we reduce the search space for viable MD5 hashes?
There is a bug bounty website, I can download any file uploaded on it, including files of other users. However, I need to know the md5 hash of a file to download it.
The uploaded files can be any type: images, pdf, video, audio, doc, etc.
… Continue reading Can we reduce the search space for viable MD5 hashes?
I am using the following code in my code to send a password reset token to a user.
$token = md5($user_id . time());
Why this is considered as a bad approach being cited as it has a weak entropy. The above code would generated a scary look… Continue reading Determining Entropy in PHP
Hypothetically, would it be safe to encrypt company text only files with the less secure MD5 hash, if the files are all stored locally on local servers with their own security measures?
Continue reading Is it safe to encrypt company text files with MD5 hash?
I am trying to follow the example of how a hash length extension attack works using the article here: https://www.skullsecurity.org/2012/everything-you-need-to-know-about-hash-length-extension-attacks
In this, the author has a concrete exa… Continue reading Trouble understanding hash_extension tool examples for hash length extension attack (C#)
I’m trying to figure out the time needed to crack an HTTP digest auth. According to the RFC2069, the digest in calculated according to this scheme :
HA1 = MD5(username:realm:password)
HA2 = MD5(method:digestURI)
response = MD5(HA1:nonce:HA… Continue reading How secure is HTTP auth digest in 2023
Recently, after doing a fresh install of my Mac’s OS, I downloaded VirtualBox and, from an HTTP site, a linux ISO. The ISO had only an MD5 checksum for verification. The hashes matched. So I ran the ISO in VirtualBox multiple times, briefl… Continue reading Is downloading a linux ISO from an HTTP site and running it in VirtualBox very risky?
I’m currently learning about password cracking, and I have a set of passwords with their respective hash values. I used Hashcat to crack the hash values, just to see how it works, but I got different passwords. After some research, I found… Continue reading How can I identify the salt value used in a password hash?
I already download website template from google but nothing password decryption but I found this hash password :
$1$Ha0.Er0.$fxPLqLtb5HG75vZV2W1yp/
$1$gA..p55.$XdKvOAKSVjMbG3kU4u0XN.
$1$gv1.p84.$/t82paUmbhSQxPqRLpzdr.
Please help me to dec… Continue reading Somebody Help me to decrypt this hash [closed]
I’m currently working on a project. but i still facing some issue due to some crypted data. i know the plaintext and got the correspond hash.
plaintext: C018AE45B37DAE665486F4151E0C1E6F
Hash: rROkd+H57WFtdkbkOEgTWLG0zqFpo/++2ttu0YPXvqNn2l3… Continue reading How to find the correspond hash algorithm?