From bdef021a6d6a9605687d84ad4d20d65ecb201bc4 Mon Sep 17 00:00:00 2001 From: Swissky Date: Wed, 10 Jul 2019 21:26:24 +0200 Subject: [PATCH] Magic Hashes SHA224 and SHA256 --- JSON Web Token/README.md | 4 +--- Type Juggling/README.md | 4 +++- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/JSON Web Token/README.md b/JSON Web Token/README.md index c2f2e9e..7452986 100644 --- a/JSON Web Token/README.md +++ b/JSON Web Token/README.md @@ -123,9 +123,7 @@ print public print jwt.encode({"data":"test"}, key=public, algorithm='HS256') ``` -:warning: This behavior is fixed in the python library and will return this error `jwt.exceptions.InvalidKeyError: The specified key is an asymmetric key or x509 certificate and should not be used as an HMAC secret.`. You need to install the following version - -`pip install pyjwt==0.4.3`. +:warning: This behavior is fixed in the python library and will return this error `jwt.exceptions.InvalidKeyError: The specified key is an asymmetric key or x509 certificate and should not be used as an HMAC secret.`. You need to install the following version: `pip install pyjwt==0.4.3`. Here are the steps to edit an RS256 JWT token into an HS256 diff --git a/Type Juggling/README.md b/Type Juggling/README.md index 2c7d7b1..95c4cea 100644 --- a/Type Juggling/README.md +++ b/Type Juggling/README.md @@ -44,8 +44,10 @@ If the hash computed starts with "0e" (or "0..0e") only followed by numbers, PHP | Hash | “Magic” Number / String | Magic Hash | Found By | | ---- | -------------------------- |:---------------------------------------------:| -------------:| -| MD5 | 240610708 | 0e462097431906509019562988736854 | Michal Spacek | +| MD5 | 240610708 | 0e462097431906509019562988736854 | [@spazef0rze](https://twitter.com/spazef0rze/status/439352552443084800) | | SHA1 | 10932435112 | 0e07766915004133176347055865026311692244 | Independently found by Michael A. Cleverly & Michele Spagnuolo & Rogdham | +| SHA-224 | 10885164793773 | 0e281250946775200129471613219196999537878926740638594636 | [@TihanyiNorbert](https://twitter.com/TihanyiNorbert/status/113807522401083392)1 | +| SHA-256 | 34250003024812 | 0e46289032038065916139621039085883773413820991920706299695051332 | [@TihanyiNorbert](https://twitter.com/TihanyiNorbert/status/1148586399207178241) | ```php