hack.js hacked

[arpansadhu10]

pasted it into https://www.md5online.org/md5-decrypt.html and got the ans

[Marwan1998]

so md5 is that weak?

[MoElaSec]

so md5 is that weak?

@Marwan1998 You shouldn't use SHA-1 or MD5 as both are considered insecure.

for MD5 long history of attacks/collisions, you can easily find online.
for SHA-1 read about:

• SHAppening
• SHAttered (first public collision)
• Birthday-Near-Collision Attack

[LunarMiolk]

There are some super cool things you can do with exploiting hash collisions, though!

Hashquines are probably one of the more 🤯

Here's a recently published one that I thought was super cool:
https://twitter.com/David3141593/status/1573218394358386688?s=20&t=Fbfvek788mosD7K0AKV8zw

[MMK21Hub]

Further reading: https://www.rogdham.net/2017/03/12/gif-md5-hashquine.en