New answers tagged

2 votes
Accepted

Do we know a MD5 collision exploiting PHP loose type comparision (0123e2 == 123e02 == 012300)?

These are often known as "magic hashes", and have been found for lots of different hashing algorithms. You can find a list of them here. The easiest way to find them to to look for a hash ...
user avatar
  • 3,571
0 votes

File can upland on my localhost but it's not uploading on the client site

Your key is aGFiaWJhNzc= which base64 decodes to habia77. According to your code that should echo Error, the call to write the file only occurs if $Key matches the string yes. If that doesn't fix it ...
user avatar
  • 5,740
1 vote

How to track which php file executed a malware binary

I have the same problem. Try to find "dir" file on your public folder like /var/www/. In my case I found this on my laravel website, there are file looks like this on my "public" ...
user avatar
0 votes

unknown (malicious?) code and file in public dir (Laravel 5.8, apache/cPanel)

Any code that appears to be appended to many files is malicious by itself since it does undeclared/unknown functions. In situations like this, you can declare your whole server compromised, and should ...
user avatar
0 votes

2 Way SSL for Magento API

What are the changes required in PHP and apache. What are the certificates, the client should pass to the server. What are the certificates, the server should pass to the client. Your questions are ...
user avatar
  • 101
1 vote

use md5 hashed guid as app login and REST interface

In this situation, it sounds like you're using a hash of a user ID as a credential. That's not particularly secure, because if the user ID ever leaks, then the credential is immediately known. It ...
user avatar
  • 6,645

Top 50 recent answers are included