spaze / hashes Goto Github PK

The == trick is used only for MD5, SHA-1, and plaintext

It should be noted that the == trick doesn't work with php 5.4.4+ since as of php 5.4.4 "Integral strings that overflow into floating point numbers will no longer be considered equal"

Since that overflow issue is what the == trick is actually using, it's important to note the version dependency.

Although I do understand there are some exceptions with md5 that still work with the == trick even in php 7.1 https://3v4l.org/krCff

corrections to the plaintext items this list shows various PHP versions that may or may not allow the == trick to work https://3v4l.org/sHmuG

Making a note so I don't forget
See this tweet & archive

This website has some magic hashes that are not in the repo: https://www.whitehatsec.com/blog/magic-hashes/

I found it when searching for tiger160,3 hashes and the one there is different from the one in the repo

Hi everyone who read this,

While doing a security CTF challenge, I found some other strange hashes on a Stackoverflow discussion

• Only Numbers

  • ximaz : 61529519452809720693702583126814
  • aalbke : 55203129974456751211900188750366
  • afnnsd : 49716523209578759475317816476053
  • aooalg : 68619150135523129199070648991237
  • bzbkme : 69805916917525281143075153085385
  • Ioktak : 54948232518148653519995784773259
  • '99x`b0x'b : 24034969117462298298932307218853
  • uttuJ## : 74616072929762262275291990931711

• Only letters

  • cbaabcdljdac : cadbfdfecdcdcdacdbbbfadbcccefabd

Maybe it could be useful to someone..maybe not!

Originally posted by @r3g31rk in #20 (comment)

I was trying to add these hashes to seclists when I ran into a issue verifying the pbkdf hashes. The problem is that I can’t seem to get a magic hashes out of any entries for pbkdf2-* files. If anyone knows how to correctly hash the entries using cyberchef or php please leave the code here.