Demonstrating MD5 Hash Collision with Binary Files

Video

MD5 Binary Çarpışma Örneği

POC - Proof of Concept

• Get sample files from releases (evil and good files.)

• Run like bellow:

  

• The files have same md5: 2c88a72315854541c00d38a04962ba8d

Steps

• Download and extract repo as zip:

  

• Edit the main_good() and main_evil() functions in hello-erase.c as you want. Like bellow:

  

• make it in terminal:

  

• Compile your program and link against goodevil.o with gcc hello-erase.c goodevil.o -o hello-erase

  

• Execute ./evilize hello-erase -g good -e evil and wait several hours:

  

• Check the MD5 checksums of the files “good” and “evil”; they should be the same.