Tag Archives: phpass

Introducing: PasswordLib

Ircmaxell is Introducing PasswordLib, a PHP library for password hashing. It’s a spin-off from CryptLib which didn’t finish so far. Github; Packagist. MIT License.

Posted in Developing, Linked, PHP Library, Pressed | Tagged , , , , | Leave a comment

Congrats Solar Designer!

And the winner is: Solar Designer in the Month of PHP Security 2010 with his article “How to manage a PHP application’s users and passwords” (Full Listing). Solar Designer’s phpass password hashing algorithm is used in wordpress. It has been … Continue reading

Posted in Hacking The Core, Pressed, Reports | Tagged , , , , , , | Leave a comment

WordPress Single-Sign-On Preview

I’m currently working on a more detailed article related to wordpress and single-sign-on. It is a nice topic and because of that I started to create some concept art now that should picture the whole thing. That is a sample … Continue reading

Posted in Pressed | Tagged , , , , , , , , , | 10 Comments

PHP Open Basedir degrades Security (Bonus)

Some hosters are using the open_basedir restrictions because they think this makes hosting somewhat more secure. Well normally it is not because a hoster in need to enable it often shows that the system is not properly configured in respect … Continue reading

Posted in Pressed | Tagged , , , , , , , | 1 Comment

Hashcat vs. Phpass

I just opened my blog here. As a starter I serve some hot and spicy binaries. Since the end of the last year (christmas eve to be precise) hashcat went public. It is an advanced password recovery software and supports … Continue reading

Posted in Hacking The Core, Tools | Tagged , , , , , | 1 Comment