Mirrors/bugbounty-cheatsheet
2
0
Fork 0
mirror of https://github.com/EdOverflow/bugbounty-cheatsheet.git synced 2025-02-16 14:38:22 +00:00
Code Issues Projects Releases Packages Wiki Activity

Add more info to Bcrypt (BSD) Wraparound Bug.

Browse source
This commit is contained in:
EdOverflow 2017-07-14 13:43:05 +01:00
parent ba67fdae97
commit 003c5ddaf7
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
README.md
View file

@ -203,7 +203,9 @@ If the target is running their application in debug mode you might be able to ru
<pre><code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code></pre>
</details><br>
**Bcrypt Wraparoud Bug**
**Bcrypt (BSD) Wraparoud Bug**
`$2a$` Bcrypt hashes were vulnerable to wraparound bug where the first string in the list below would ouput the same hash as the next strings.
```
000000000000000000000000000000000000000000000000000000000000000000000000