Tags: php type-juggling 

Rating:

# MD5-- (Web 237 points)

![](MD5--.png)

## Source code

```

```

This piece of code is checking for a string whose md4 hash is equal to itself.

But one more thing that needs to be observed here is the usage of "==" instead of "===".

This means php type juggling is possible.

The code is available [here](crack.py)

## References
1) https://github.com/bl4de/ctf/blob/master/2017/HackDatKiwi_CTF_2017/md5games1/md5games1.md

Original writeup (https://github.com/networknerd/CTF_Writeups/blob/master/2019/HSCTF_2019/Web/MD5--/README.md).