Fix issue #64 (#65)

skills · Jan 4, 2024 · f8ccb2b · f8ccb2b
1 parent 388c4f6
commit f8ccb2b
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 6 deletions.
diff --git a/Season-2/Level-5/hint-1.txt b/Season-2/Level-5/hint-1.txt
@@ -1,14 +1,10 @@
 We can provide a malicious object as the parameter for CryptoAPI.sha1.hash().
 What does this trigger? 
 
-Example 1:
+Example:
 $ var s = { toString: function() { alert('Exploit 1'); } };
 $ CryptoAPI.sha1.hash(s)
 
-Example 2:
-$ var s = { toString: function() { alert('Exploit 1'); } };
-$ CryptoAPI.sha1.hash("abc")
-
 Do you want to visualize the above? Follow these instructions:
 
 1. Double click index.html to open it in any browser. Are you using GitHub Codespaces?

diff --git a/Season-2/Level-5/solution.js b/Season-2/Level-5/solution.js
@@ -59,7 +59,8 @@ var CryptoAPI = (function() {
 						w[(i >> 2) & 15] = j;
 						j = 0;
 					}
-					if ((i & 63) == 63) CryptoAPI.sha1._round(H, w);
+					// FIX for hack-2.js
+					if ((i & 63) == 63) internalRound(H, w);
 				}
 
 				for (i = 0; i < H.length; i++)