Skip to content
attack.paths
Sign in
← LibraryTechnique entry
CR-HASH-LEN-EXTCredential Access

Hash Length Extension

MAC = H(secret || msg) (MD5 / SHA-1 / SHA-256 without HMAC) — append arbitrary data without knowing the secret using hashpump.

§ Where this technique fits

CR-HASH-LEN-EXT is catalogued under the Credential Access tactic of the offensive-security kill-chain. It appears in 0 approved dossiers in the registry, typically.