Skip to content
logo
Red team
Hash length extension attack
  • Green team
  • Blue team
  • Purple team
  • Indigo team
  • Broomstick Brief
  • Ty Myrddin
Initializing search
      • IN: Where the falcons and foxes roam
      • THROUGH: Where the raccoons burrow and rummage
        • The art of staying where you are not wanted
        • Where the raccoon overflows the bin—on purpose
        • Foraging for secrets in binaries
        • The payload is in the picnic photo
        • Tipping the stack—and the garbage can
          • Field notes from the bin-raider’s handbook
          • Where the raccoon picks the locks of logic
            • Old tricks, new treats: Unmasking classical ciphers
            • The raccoon’s secret recipes for digital mischief
            • CBC Bit-flipping attack
            • AES Electronic code book
            • Initialisation vector
            • Riding the currents: Stream cipher exploits
            • Breaking the seal: Hash function vulnerabilities
              • DCC Hash
              • DCC2 Hash
              • LM Hash
              • Message Digest 5
              • NT Hash
              • SHA-2 Hash
              • CISCO Salted Password
              • Hash length extension attack
                • Resources
              • SHA-3 Hash
            • Unlocking RSA: Asymmetric mischief
            • The Raccoon’s curiosity cabinet
            • Curves ahead: Navigating elliptic curve cryptography
        • Nature’s cheats: The raccoon’s guide to slipping through the cracks
      • OUT: Where squirrels swipe the crown jewels
    • Resources

    Hash length extension attack¶

    RootMe challenge: Service - Hash length extension attack: H(key ∥ message)

    You can use Stephen Bradshaw’s hlextend module.

    Resources¶

    • Everything-you-need-to-know-about-hash-length-extension-attacks (blog.skullsecurity.org)

    Last update: 2025-08-07 09:38
    Back to top
    Previous CISCO Salted Password
    Next SHA-3 Hash
    © Copyright 2025, TyMyrddin.
    Created using Sphinx 7.2.6. and Sphinx-Immaterial

    Made with love in the Unseen University, 2025, with a forest garden fostered by /ut7