webmedium

Магическая админка — hackerlab

hackerlab

Task: PHP authentication with loose comparison (==) for MD5 hash check. Solution: Used PHP Type Juggling (Magic Hash Attack) - found a password where md5(md5(password)) produces a 0e-prefixed hash that equals 0 in loose comparison.

$ ls tags/ techniques/

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]