-
-
Notifications
You must be signed in to change notification settings - Fork 371
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Password Shucking challange #859
Comments
Nice reference to further explain shucking is at https://neilmadden.blog/2023/04/27/i-still-dont-really-get-hash-shucking/ .
|
Todo;s for this challenge:
|
@commjoen Again Divyanshu here, please assign it to me |
@divyanshuagarwal-23 can you maybe first complete #810 :-)? |
@commjoen Would like to work on this if it is not yet assigned. |
It is all yours sir! |
Password Shucking challenge is based on Pre-Hashing Passwords from OWASP Password Storage Cheat Sheet. During migration from weak MD5 password hashing algorithm to strong Bcrypt wrapping approach
bcrypt(md5(data:$password))
is implemented. Great description is presented What the Shuck? Layered Hash Shucking be Sam Croley.@commjoen could you describe more details from Slack?
The text was updated successfully, but these errors were encountered: