New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

hack.js hacked #4

Open

arpansadhu10 wants to merge 2 commits into fireship-io:main from arpansadhu10:main

arpansadhu10 commented Nov 1, 2021

pasted it into https://www.md5online.org/md5-decrypt.html and got the ans

arpansadhu10 added 2 commits

November 1, 2021 22:43


          Update hack.js

f84f075

simply used https://www.md5online.org/md5-decrypt.html to decrypt...


          Update hack.js

f4dad0e

Marwan1998 commented Nov 1, 2021

so md5 is that weak?

MoElaSec commented Nov 1, 2021

so md5 is that weak?

@Marwan1998 You shouldn't use SHA-1 or MD5 as both are considered insecure.

for MD5 long history of attacks/collisions, you can easily find online.
for SHA-1 read about:

SHAppening
SHAttered (first public collision)
Birthday-Near-Collision Attack

LunarMiolk commented Sep 24, 2022

There are some super cool things you can do with exploiting hash collisions, though!

Hashquines are probably one of the more 🤯

Here's a recently published one that I thought was super cool:
https://twitter.com/David3141593/status/1573218394358386688?s=20&t=Fbfvek788mosD7K0AKV8zw

MMK21Hub commented Sep 25, 2022

Further reading: https://www.rogdham.net/2017/03/12/gif-md5-hashquine.en

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet