Waraxe Forums - MD5 Collision Generation

LINUX · Moderator

Faster implementation of techniques in How to Break MD5 and Other Hash Functions, by Xiaoyun Wang

http://www.infosec.sdu.edu.cn/paper/md5-attack.pdf

-------------------------------------------------------------------------------
MD5 Collision Generation
download: http://www.stachliu.com/md5coll.c

download:http://pub1.positivenetworks.net/~dispensa/md5coll.zip

MD4 Collision Generation

http://www.stachliu.com/md4coll.c

more info <> http://www.stachliu.com/[/code]

waraxe · Site admin

Have you allready tested it? This code seems not finished yet. Just some proof of concept. But if there is or will be md5 collision generator, which can generate collisions for arbitrary md5 hashes, then this can be very interesting for phpnuke/phpbb/other md5 hash using software exploiters.
Just think about this - you have gotten md5 hash (cookie stealing, sql injection) and now you want to know password. You can bruteforce, use wordlists or use rainbow tables. But if password was really good, then your mission is failed. Now, you will use md5 hash collision generator and within reasonable timespan it is outputting some "garbage" data - not original password, but other plaintext, which will get SAME md5 hash. And now we can use this as password. Of course there can be problems with data sanitize (if plaintext contains non-ascii stuff,if it is very long, etc), but anyway, this can give to exploiters brand new weaponry Smile