Collaborate Disseminate
I’m trying to crack some MD5 hashes given in OWASP’s BWA on their DVWA site. I was able to use John the Ripper and the very first time it worked fine and it showed the reversed hashes using the code:
john –format=raw-md5 –wordlist=/usr/… Continue reading John the Ripper – Can’t get cracked MD5 hash to show
So i wanted to make a quick small test on comparing hashes between a word document and a small modification inside the document and then revert the changes back to original and check all the 3 hashes. Of course the original a… Continue reading Comparing the MD5 hash to a modified word document and reverting it to original
I’m trying to generate a file full of data with an MD5 hash that matches the hash of some password string.
Because I don’t care exactly what the string is, I figure that this is second-preimage, and should be possible.
i.e. "yellowpot… Continue reading Generating a file and a password with matching MD5 hashes?
Oracle’s delay in dropping support for the hash seems strange, but it’s finally named the day Continue reading Clock’s ticking for MD5-signed JAR files, says Oracle
Problem space
I’m way out of my pay grade, I’m trying to figure out
How much randomness does a call to random() actually provide in PostgreSQL?
SELECT random();
Whether or not you can reasonably guess that much randomnes… Continue reading How many combinations of md5sums can be computed from a call to random() in PostgreSQL?
I just downloaded a disk image. After trying to install in a Virtualbox VM and seeing that it wasn’t successfully booting into an installer, I checked into the md5sum. It seems the md5sum that is said online differs from my d… Continue reading If you accidentally install a malicious OS disk image in a VM, can it cause any harm?
TL;DR
I am working on a gaming system that uses UnityScript and C# on the client and PHP on the server. A MD5 hash of the data plus a shared secret is used to check that the data has not been modified in transit. Is MD5 good… Continue reading How to approach replacing md5 for transporting Unity game data to a remote server
This morning I received an email from Yahoo. Five minutes later I’d closed my account. Continue reading Yahoo breach: I’ve closed my account because it used MD5 to hash my password
Crypto company Venafi points out potential holes in Yahoo’s processes and policies around cryptography and digital certificates, any of which could have been exploited in the breach to move data off the Yahoo network. Continue reading Questions Mount Around Yahoo Breach
This question already has an answer here:
Should passwords be automatically reset when the underlying method changes
6 answers