domains / families / security / hash-attack-techniques

hash-attack-techniques

separate

Hash attack playbook. Use when exploiting length extension, MD5/SHA1 collisions, HMAC timing leaks, birthday attacks, or hash-based proof of work in CTF and authorized testing scenarios.

When to use

• length extension attacks
• MD5/SHA1 collision generation
• meet-in-the-middle hash attacks
• HMAC timing side channels
• birthday attacks
• proof-of-work solving

When not to use

• applying length extension to HMAC
• applying length extension to SHA-3

Skill page

Source