Confuse Me — PHP Magic Hash 0e MD5 Bypass

PHP’s loose == treats any string starting with ‘0e’ followed by digits as the float 0. Pass a known magic hash input whose MD5 begins with 0e to bypass a hash comparison.

January 1, 2024 · 1 min · giordii