EXETOOLS FORUM  

Go Back   EXETOOLS FORUM > General > Community Tools

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 09-02-2018, 16:28
CodeCracker CodeCracker is offline
Family
 
Join Date: Jun 2011
Posts: 183
Rept. Given: 14
Rept. Rcvd 191 Times in 45 Posts
Thanks Given: 8
Thanks Rcvd at 520 Times in 121 Posts
CodeCracker Reputation: 100-199 CodeCracker Reputation: 100-199
MD5 Fast Collision

MD5 Fast Collision:
generate two blocks with same MD5 hash.

The program require Microsoft Visual C++ 2008 Redistributable
Requirements:
https://www7.zippyshare.com/v/hx08GIN8/file.html

Source code:
https://www2.zippyshare.com/v/NIpCbdj7/file.html
Attached Files
File Type: zip MD5_Fast_Col_Src.zip (107.1 KB, 1 views)
File Type: zip MD5_Fast_Col_Exe.zip (35.3 KB, 1 views)

Last edited by CodeCracker; 10-14-2018 at 20:51.
Reply With Quote
The Following 7 Users Say Thank You to CodeCracker For This Useful Post:
Abdelhamid (09-02-2018), chants (09-03-2018), niculaita (09-02-2018), oco (10-09-2018), Ragnarok (09-03-2018), TechLord (09-03-2018), trickyboy (09-06-2018)
  #2  
Old 09-03-2018, 04:44
chants chants is offline
Friend
 
Join Date: Jul 2016
Posts: 205
Rept. Given: 0
Rept. Rcvd 9 Times in 8 Posts
Thanks Given: 150
Thanks Rcvd at 193 Times in 100 Posts
chants Reputation: 9
Can you clarify if this is a pre-image (where the hash is given), second pre-image (where one block is given), or just a plain collision (two random blocks) as I suspect its the 3rd which is still not as useful as the prior 2.
Reply With Quote
  #3  
Old 09-03-2018, 07:46
atom0s's Avatar
atom0s atom0s is offline
Family
 
Join Date: Jan 2015
Location: 127.0.0.1
Posts: 200
Rept. Given: 21
Rept. Rcvd 94 Times in 43 Posts
Thanks Given: 32
Thanks Rcvd at 236 Times in 92 Posts
atom0s Reputation: 94
From a quick glance at the source it looks like it is based on user input to generate the collisions but uses a static IV to do it:
Code:
// IV = 0123456789abcdeffedcba9876543210
const uint32 MD5IV[] = { 0x67452301, 0xefcdab89, 0x98badcfe, 0x10325476 };
Reply With Quote
The Following User Says Thank You to atom0s For This Useful Post:
chants (09-03-2018)
  #4  
Old 09-03-2018, 15:43
CodeCracker CodeCracker is offline
Family
 
Join Date: Jun 2011
Posts: 183
Rept. Given: 14
Rept. Rcvd 191 Times in 45 Posts
Thanks Given: 8
Thanks Rcvd at 520 Times in 121 Posts
CodeCracker Reputation: 100-199 CodeCracker Reputation: 100-199
It doesn't use static IV - MD5IV can be set by user,
but unfortunately it is just generate two random blocks with MD5 collision!
Reply With Quote
The Following User Says Thank You to CodeCracker For This Useful Post:
chants (09-05-2018)
  #5  
Old 09-04-2018, 02:50
atom0s's Avatar
atom0s atom0s is offline
Family
 
Join Date: Jan 2015
Location: 127.0.0.1
Posts: 200
Rept. Given: 21
Rept. Rcvd 94 Times in 43 Posts
Thanks Given: 32
Thanks Rcvd at 236 Times in 92 Posts
atom0s Reputation: 94
MD5IV in that line is const, meaning it can't be changed during runtime.
It would have to be edited at compile time to be altered.

If the exe alone was distributed, then it wouldn't be changeable unless someone hex edited/memory edited the exe.
Reply With Quote
  #6  
Old 09-04-2018, 14:54
CodeCracker CodeCracker is offline
Family
 
Join Date: Jun 2011
Posts: 183
Rept. Given: 14
Rept. Rcvd 191 Times in 45 Posts
Thanks Given: 8
Thanks Rcvd at 520 Times in 121 Posts
CodeCracker Reputation: 100-199 CodeCracker Reputation: 100-199
void CMD5_Fast_ColDlg::OnBnClickedOk()
{
...
uint32 IV[4] = { MD5IV[0], MD5IV[1], MD5IV[2], MD5IV[3] };
...
if (initialValues[0]!=0)
{
...
IV[0] = Endian_Conv(IV[0]);
IV[1] = Endian_Conv(IV[1]);
IV[2] = Endian_Conv(IV[2]);
IV[3] = Endian_Conv(IV[3]);

}

So MD5 initial values can be set by user!
Reply With Quote
The Following 3 Users Say Thank You to CodeCracker For This Useful Post:
Megin (09-05-2018), niculaita (09-04-2018), nimaarek (09-08-2018)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Fast Universal Unpacker v0.1 Mahmoudnia Source Code 0 08-29-2014 15:37
what is fast android simulator. newyzy General Discussion 7 11-06-2013 01:04
Any fast factorizing program? suddenLy General Discussion 6 01-06-2005 17:49


All times are GMT +8. The time now is 07:50.


ICP05004977
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX