Skip to content

Commit a43614b

Browse files
molangningmolangning
committed
Imported and cleaned php magic hashes
1 parent 802ec0e commit a43614b

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

51 files changed

+3168
-49
lines changed

‎Passwords/PHP-Magic-Hashes.txt

-25
This file was deleted.

‎Passwords/php-hashes/README.md

+35
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
# PHP magic hashes
2+
3+
PHP has some unique features which makes hash collisions more easier when using the `==` to compare.
4+
5+
The raw text are taken directly from [spaze/hashes](https://github.com/spaze/hashes/)
6+
7+
- - -
8+
9+
### Floating comparison
10+
11+
Any strings that starts with any numbers of `0`, followed by `e` then ends with only numbers will be treated as zero. An example of such strings are `0e123456` and `00e123456`. [Example code](https://3v4l.org/n8iOp)
12+
13+
This behavior can be extended to numbers, like `'0' == '000`. [Example code](https://3v4l.org/K9QRb)
14+
15+
With loose comparison, these two example strings will equate to each other as both of them are treated as a zero in the backend.
16+
17+
Sometimes, hashes of specific strings will result in those special strings as an result. Those hashes are called `magic hashes`
18+
19+
Here is an example of such weak comparison for [sha256](https://3v4l.org/Lu7tm).
20+
21+
- - -
22+
23+
### Plaintext
24+
25+
Plaintext.txt just contains some ways to abuse php's weak comparison
26+
27+
- - -
28+
29+
### Truncated text
30+
31+
For bcrypt, passwords are automatically truncated to 72 characters, so as long as the first 72 characters match, the hashes will match.
32+
33+
[Bcrypt example](https://3v4l.org/MsfS0)
34+
35+
Descrypt have similar behavior to bcrypt, but passwords are instead truncated to 8 characters.

‎Passwords/php-hashes/floating_comp/crc32.txt

+20
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
HFS_uPqtIQPl:0e929373
2+
HFS_NhqlNQ1D:0e965437
3+
HFS_+1G2t/1r:00e84097
4+
HFS_6nk6Zta1:0e673017
5+
HFS_MmTo331q:0e644471
6+
HFS_AzZkcN8f:0e551616
7+
HFS_0LxhhhkZ:0e840769
8+
HFS_iKGvCNnD:0e402980
9+
HFS_YYdr5SWA:00e60109
10+
HFS_kJ8SLtXh:0e513732
11+
do+d4JXvGqvL:0e687021
12+
9tawE8a0EUyU:0e626693
13+
i6BliFUdioZ2:0e805102
14+
ZzukD6ZZUYnf:0e138757
15+
R0GVRbsgqAkq:0e263353
16+
Dusy8MDlN1DG:0e859691
17+
o2XXS8QutHnK:0e616557
18+
rWySA3KKmokQ:0e951917
19+
zu9dxemJPNdk:0e223236
20+
cG4ZtD4z8JiK:0e559727

‎Passwords/php-hashes/floating_comp/crc32b.txt

+20
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
HFS_t90miW9g:0e395566
2+
HFS_cJ3zkvQY:0e508686
3+
HFS_BtdiQ0kq:0e867068
4+
HFS_oimsNm9f:00e36431
5+
HFS_Ff7z2lY9:0e957694
6+
HFS_1ogclZt0:0e245532
7+
HFS_6lpwmZAV:00e62469
8+
HFS_1nUsdYXt:0e731733
9+
HFS_sseFHTIO:0e975617
10+
HFS_3y5RlRwJ:00e65928
11+
m7IHnxcRTBBO:0e940524
12+
s8nGXfzc1gLV:0e306100
13+
5JYJnHH7EB7w:0e383201
14+
ppBjSUTcuIde:0e956113
15+
W/GKrHQ9sRqk:0e772663
16+
cCsoYjRJ3qL0:0e050048
17+
0rc8nlzuCvtG:0e419810
18+
Prq11e6Styrp:0e292230
19+
0joOpQlWgVSD:0e501433
20+
XqrtwN9LgTM/:0e689095

‎Passwords/php-hashes/floating_comp/fnv132.txt

+20
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
HFS_fJRRVm+S:0e604578
2+
HFS_jpRkyCVW:0e812503
3+
HFS_GrBcUOEe:0e362351
4+
HFS_CP4WQQ/m:0e829559
5+
HFS_MYXHoW7e:00e21725
6+
HFS_6m34HXl+:0e300614
7+
HFS_hVCZWCh4:0e824542
8+
HFS_VNIzVR6G:0e349231
9+
HFS_FwB287AP:0e887988
10+
HFS_fnsOA2UV:0e962163
11+
jQBvBPJca0X6:0e191084
12+
v9v5lkxbgndN:0e708569
13+
KKduycJo2NA4:0e859228
14+
RW3AsBuFRofx:00e21355
15+
H/8tFwVkV0nd:0e829312
16+
vH55u2YbjcAA:0e265582
17+
zP9Izjs2irUW:0e673403
18+
61ePjhO7MXSy:0e997362
19+
zEL2Ax4CVoFz:00e03591
20+
kAnNwLx+vmlh:0e498108

‎Passwords/php-hashes/floating_comp/fnv164.txt

+20
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
HFS_mmjH9CNN:0e99769769728569
2+
HFS_6XEFLJOH:0e77252548411175
3+
HFS_2jtp0982:0e34597864874626
4+
HFS_b3kSpfs+:0e30751543430386
5+
HFS_aAQs6Cyu:0e66626906207668
6+
HFS_qRCQCIaK:0e97108743422874
7+
HFS_h/B2aEbV:0e48470717638788
8+
HFS_NQRnuOOl:0e78474377494907
9+
HFS_BaC2dl4c:00e7018025920202
10+
HFS_HF6Wgc28:00e4477970079172
11+
ICE1d0K/RL7T:0e87116729093816
12+
OgpHAyV7w/pt:0e92510903960722
13+
Ls/ijNyI2dW3:0e49565360806964
14+
vT+ia3KjNMMn:0e43654725309262
15+
8UZZxmSBbj7f:0e55840857685749
16+
mUxTfMMkdSec:0e33409805165683
17+
z9B8zV8jAUJl:0e43960404058632
18+
LfauICk8l0d6:0e10379759030222
19+
BMS4d1MCRE3m:0e12639087316691
20+
6KyW3y0vOXSS:0e44708754369825

‎Passwords/php-hashes/floating_comp/fnv1a32.txt

+20
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
HFS_wyEBSA7V:0e534803
2+
HFS_NTG/rp8K:0e380702
3+
HFS_8bb79J+r:0e499146
4+
HFS_NCLJdw8D:0e279619
5+
HFS_+U/ddhtj:0e844548
6+
HFS_wR+uZeeF:0e696336
7+
HFS_t8jKENCz:00e50378
8+
HFS_p0BbTwIs:0e873774
9+
HFS_HcjAD1gZ:0e558807
10+
HFS_Y1iiKHNg:0e850401
11+
Ky/FMUV7acqp:0e338008
12+
nIao+ZCGW1yi:0e850185
13+
Ba+1AjsMkgU4:0e611004
14+
dBWEkOOVrm1H:00e81498
15+
pz0fUrCik7Xj:0e561856
16+
VVwHKixOOkp5:0e265262
17+
brm9jKlyPDuD:0e577432
18+
j9ppOBAEe4FI:0e888223
19+
2XCVJqdz5buc:0e647622
20+
ifU9AwKqTpFk:0e859873

‎Passwords/php-hashes/floating_comp/fnv1a64.txt

+20
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
HFS_Zk558Stl:0e63735032620881
2+
HFS_Z0zC19dz:00e4539999025438
3+
HFS_AjgVckBy:0e24330735757830
4+
HFS_Rsa1ptfV:0e14987418690258
5+
HFS_EB4aWjEF:0e99230175338237
6+
HFS_xiyO7ooR:0e59842152613905
7+
HFS_ZzkcfVgb:0e25056956505672
8+
HFS_Dn1zB//4:0e03757793636208
9+
HFS_NGPMd7bq:0e44676527555825
10+
HFS_tmbw2/qf:0e40131582938791
11+
pco3ZfZmrUBJ:0e05359896370116
12+
bz9ISyvY9Vb3:0e65395150279106
13+
M6R0BrFPl148:0e43580429083055
14+
W3ip6wIFHvas:0e06505527087824
15+
eCDWwfqkpUIR:0e25777293567931
16+
IJtSxVbjF2ob:0e81314171010538
17+
064Tu56U1UEb:0e68411166834011
18+
v2juiQs2UUxS:0e06435821426364
19+
pviQoG24tL22:00e3577320523955
20+
mGToWOBcVspV:0e53560715322800

‎Passwords/php-hashes/floating_comp/haval128,3.txt

+20
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
Hc0aB8p8CpKi:00e87990840549464436715117226983
2+
BGGJlLv/GYok:00e85650966369081160436000945995
3+
s7WMcKnZ/kzg:00e97615161216545460560708019418
4+
NK+nx5eetv/p:0e637481972504749625591446873225
5+
MUn+9Ib6/NMO:0e564934382199694374935868660885
6+
towJzaPbSeJN:0e800051290985131754184104629939
7+
EjFIOVEP2Y/w:0e648021848868658747230365721319
8+
tVf4T+/e1BRT:0e197045554516607160549489551104
9+
+Q8pxIx4VkiZ:0e323951952843860186883283848540
10+
xWAK0mTzfVrG:0e338717845199315687624058385989
11+
HFS_eVqZgPDV2o6D:0e803410568231701558419329821959
12+
HFS_FmSb/K9NnkL3:00e27465814007486943610626830963
13+
HFS_csuacgV1fhVy:0e496412321227784868481853981968
14+
HFS_h6PP2IEtlFat:0e109202590694681889848277372784
15+
HFS_woa6CK0FITIy:0e888470791968982727374420202621
16+
HFS_49EiLRodZfmQ:0e843253718875009042858566146390
17+
HFS_Ja7HxaNIKdD2:0e300530956879222335658470434733
18+
HFS_+fAaaZUkDHUE:0e087311696200150344500783258968
19+
HFS_HqJ0DJ0q3plN:0e109720983314623637038758578773
20+
HFS_76se6PIp21MU:0e223117526056466767519217492299

‎Passwords/php-hashes/floating_comp/haval128,4.txt

+22
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
kkNwiLvp:0e224499306604034592498556683884
2+
aVzj4kSl:0e699098147704478302187197452577
3+
Rr0rtxAmJkX1:0e948786571371740736679014195910
4+
pOfQlZN1bEe+:0e763143522516249376445822634702
5+
X5FUngTs0xmK:0e034132293760348512897203627244
6+
B2wruC8LuwPp:0e792256378944410505513115026683
7+
GkKeU7RSZ+tB:00e00956485375103399460147021060
8+
eEo15Ae+wfot:0e731970944586972288355541307227
9+
hN6nZpUTJbUL:0e546684356004016895095440515698
10+
KnJ12oTxpzM0:0e230201982980004430779943196315
11+
Eq1Lp91ZUwdJ:0e850895948803892376429698758484
12+
8a0rD9lxxe/d:0e494613744998704148276916252662
13+
HFS_2vFy8egqyX86:0e411443916369260608664108755373
14+
HFS_rpeHhFxDD8Hr:0e430966836024156014941675462009
15+
HFS_s3ZC0Zi0KUT8:0e308320803113259548747746525892
16+
HFS_MeNMcKEgAq6s:0e911510173906812607381599030115
17+
HFS_mzdfepOik2d9:0e406117797053803350857960561164
18+
HFS_/gafnmo3h7te:0e707962923571076517504510602074
19+
HFS_VolXadwBfBGS:0e354055072092201161847707006284
20+
HFS_bC2bKTitaVql:0e588031527566426353005807499347
21+
HFS_4kNYv081anJC:0e924023131980996780460963248504
22+
HFS_fYISH6WAAXUQ:0e262623687505394293343859341884

‎Passwords/php-hashes/floating_comp/haval128,5.txt

+17
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
KrRepI8+:0e094737743220655841445846663343
2+
IvgTEsdw:0e276916413118993176031864485352
3+
c+vK/GHW:0e981995477080918746281793582934
4+
UoCPK6mj:0e400819262258099937317495389706
5+
fJk2R+pcCVY9:0e009896675943615722112567195960
6+
x0nlxkSR7fiA:0e285677133603495779179085825289
7+
1j61rkcol66D:0e233981993594667945785775640925
8+
EEXyi3oeVxzW:0e002979692843695876894172401128
9+
mb3+B2N9jF5b:00e76164452839109593406041060211
10+
e6GKAIOoj0XV:0e637440114391585835904801245594
11+
HFS_aMlK2UEMfz8d:00e13969398729504363246601585262
12+
HFS_oLKA+vood/da:0e489300866492752037963655684467
13+
HFS_tR9HPw4a1UkW:0e547532540990180584942317746309
14+
HFS_aWiwsgAzvH0k:0e847695237242596964571128852021
15+
HFS_+MoaPZ67Zph0:0e372044489395836853593728552254
16+
HFS_BMG6q5c6UXf1:0e286388205363071342083757396906
17+
HFS_cZQsQmvfTeY7:0e796062662479589143658605156616

‎Passwords/php-hashes/floating_comp/haval160,3.txt

+1
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
v0EUjJxPgLhJ:0e02871491133112088423036355480238947466

‎Passwords/php-hashes/floating_comp/haval160,4.txt

+1
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
E/iU4G/RWX2U:0e05619243841962186068015638184515831754

‎Passwords/php-hashes/floating_comp/haval160,5.txt

+4
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
JRRw+CPb:0e50989194437111063473436963220380916416
2+
xvRv0OwB:00e9115554617769276224983939931756498863
3+
s48z7zZIxfs8:0e92477519284007915582397909940677463532
4+
dCkYzB/Amt4W:0e36718864763663089365908126910404869095

‎Passwords/php-hashes/floating_comp/joaat.txt

+20
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
HFS_xG1i0UHi:0e156093
2+
HFS_rGlu/rqL:0e019292
3+
HFS_5Qj1GlHT:0e109380
4+
HFS_AFsRjJ+2:0e368964
5+
HFS_NQCJ4LWI:0e943551
6+
HFS_bOSU4YxR:00e07556
7+
HFS_Bia7DVjj:0e439006
8+
HFS_+kI9wKwW:0e580981
9+
HFS_RmTwgQv3:0e661211
10+
HFS_FJUGF1lp:0e088912
11+
wuO+Q/Nx1FYZ:0e146837
12+
fEpESni3CU8R:0e920159
13+
DvV7QdVoamTi:0e339036
14+
bKMX2R2nuXfL:0e278242
15+
wUFfWJX+j35l:0e796936
16+
MZD1lO5tgEgt:0e469124
17+
RZd+D2PsJPbE:0e592738
18+
hRahCHdKdxFD:00e44630
19+
fyr3tLFm3GwU:0e463099
20+
2wxS/xSQF9/G:0e042304

‎Passwords/php-hashes/floating_comp/md2.txt

+21
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
Oq9wqi64:0e299969168079221277306999992834
2+
txYZT4cl:00e86369060362984332983859018031
3+
rj+EHv52:0e471200778606499034287013358745
4+
9Y+MjJ29:0e752615265323820839442808619986
5+
NGbONxf/:0e274947243675490162706392207166
6+
2HlFqrdIKK6z:0e775864032084923962202802082987
7+
nugVNza87sc1:0e492589969087156856048517023660
8+
6ze9qXw7bqvf:0e778903522307133193708445518814
9+
W2WrCWFdBdC4:0e009309245621109838125862797697
10+
3dAHjEEvaWhd:0e753246436162655664120457142403
11+
SH2JgwgXue4C:00e87419238621437076826744464218
12+
HFS_aU8YVtvk7uFd:0e108733548132157028200118844601
13+
HFS_B+Cl0xVAQn6k:0e912082349509472197532286758907
14+
HFS_Ch4Cwv8EWyeT:00e92012083082702301818382846187
15+
HFS_rPvcjXrN1trW:0e709873821179025966368591895008
16+
HFS_HGFiLsnEgkHN:0e696728618198124445143742651767
17+
HFS_q7IdVN3SuaSh:0e643040953997048990922471871309
18+
HFS_CW9wBRP/hJE/:00e16211331329674937024700072488
19+
HFS_fRCqrXeKYINW:0e391392996959320839227567015414
20+
HFS_lfwAhKJW0qOC:00e71867370461470440096217786836
21+
HFS_Nu2iJp1YS/aQ:0e552107017564446716951105766452

‎Passwords/php-hashes/floating_comp/md4.txt

+20
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
gH0nAdHk:0e096229559581069251163783434175
2+
IiF+hTai:00e90130237707355082822449868597
3+
cbl1Bbfx:0e501810953487319804019049523665
4+
qAxkkpGIvmyV:0e023511603034810990326197996106
5+
w9A4O5c2AcCI:0e117159255837959360238582783358
6+
MXBCJu4/R+te:0e822491196139737657055959804476
7+
eLJi1fX6kgzI:00e79740107547458069306261903674
8+
BEUMinS4LASy:0e393530938832712096692131547891
9+
AcOQSt6sNGN9:0e396217575381614256802963302190
10+
DHl4YbGCyl1A:0e684191063268313205630041920469
11+
HFS_xMr1f9btEwWc:0e856901476824931362949658192340
12+
HFS_tgzvSmlCbidm:00e68046312964100558804629291774
13+
HFS_BMdeGsYykS7w:0e690129148133908797898341004833
14+
HFS_Ajo9SAVRVEH4:0e887861753855845773838472382503
15+
HFS_l2OcPx/x5Bzh:0e594437669422240019387761183696
16+
HFS_fic53BOMy7J8:0e865432596624568327445739676432
17+
HFS_WnGbX8sRbjYh:0e037670520101929789823750424895
18+
HFS_gy1B+SQG9Cop:0e542018559046586704942037834686
19+
HFS_HSFs5z+SWwsi:0e583916835001260204962621340859
20+
HFS_7vt0svmr6mPG:0e281163708594849287164907175655

0 commit comments

Comments
 (0)