DEF\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n
test\n`\"'>
\n`\"'>
\n`\"'>
\n`\"'>
\n`\"'>
\n`\"'>
\n`\"'>
\n`\"'>
\n`\"'>
\n`\"'>
\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n\"`'>\n
![]()
\n
![]()
\n
![]()
\n
![]()
\n
\n\n\n\n\n\n![]()
\n![]()
\n![]()
\n![]()
\n![]()
\n![]()
\n![]()
\n![]()
\n![]()
\n![]()
\n![]()
\n![]()
\n![](x\\x09onerror=\"javascript:alert(1)\")
\n![](x\\x10onerror=\"javascript:alert(1)\")
\n![](x\\x11onerror=\"javascript:alert(1)\")
\n![](x\\x12onerror=\"javascript:alert(1)\")
\n![](x\\x13onerror=\"javascript:alert(1)\")
\n\n
\n\n\n\n\n\nXXX\n![](\"x`)
javascript:alert(1)\"` `>\n![]()
\n\n<a href=http://foo.bar/#x=`y></a><img alt=\"`><img src=x:x onerror=javascript:alert(1)></a>\">\n<!--[if]><script>javascript:alert(1)</script -->\n<!--[if<img src=x onerror=javascript:alert(1)//]> -->\n<script src=\"/\\%(jscript)s\"></script>\n<script src=\"\\\\%(jscript)s\"></script>\n<IMG \"\"\"><SCRIPT>alert(\"XSS\")</SCRIPT>\">\n<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>\n<IMG SRC=# onmouseover=\"alert('xxs')\">\n<IMG SRC= onmouseover=\"alert('xxs')\">\n<IMG onmouseover=\"alert('xxs')\">\n<IMG SRC=javascript:alert('XSS')>\n<IMG SRC=javascript:alert('XSS')>\n<IMG SRC=javascript:alert('XSS')>\n<IMG SRC=\"jav ascript:alert('XSS');\">\n<IMG SRC=\"jav ascript:alert('XSS');\">\n<IMG SRC=\"jav
ascript:alert('XSS');\">\n<IMG SRC=\"jav
ascript:alert('XSS');\">\nperl -e 'print \"<IMG SRC=java\\0script:alert(\\\"XSS\\\")>\";' > out\n<IMG SRC=\" javascript:alert('XSS');\">\n<SCRIPT/XSS SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>\n<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=alert(\"XSS\")>\n<SCRIPT/SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>\n<<SCRIPT>alert(\"XSS\");//<</SCRIPT>\n<SCRIPT SRC=http://ha.ckers.org/xss.js?< B >\n<SCRIPT SRC=//ha.ckers.org/.j>\n<IMG SRC=\"javascript:alert('XSS')\"\n<iframe src=http://ha.ckers.org/scriptlet.html <\n\\\";alert('XSS');//\n<u oncopy=alert()> Copy me</u>\n<i onwheel=alert(1)> Scroll over me </i>\n<plaintext>\nhttp://a/%%30%30\n</textarea><script>alert(123)</script>\n\n#\tSQL Injection\n#\n#\tStrings which can cause a SQL injection if inputs are not sanitized\n\n1;DROP TABLE users\n1'; DROP TABLE users-- 1\n' OR 1=1 -- 1\n' OR '1'='1\n \n%\n_\n\n#\tServer Code Injection\n#\n#\tStrings which can cause user to run code on server as a privileged user (c.f. https://news.ycombinator.com/item?id=7665153)\n\n-\n--\n--version\n--help\n$USER\n/dev/null; touch /tmp/blns.fail ; echo\n`touch /tmp/blns.fail`\n$(touch /tmp/blns.fail)\n@{[system \"touch /tmp/blns.fail\"]}\n\n#\tCommand Injection (Ruby)\n#\n#\tStrings which can call system commands within Ruby/Rails applications\n\neval(\"puts 'hello world'\")\nSystem(\"ls -al /\")\n`ls -al /`\nKernel.exec(\"ls -al /\")\nKernel.exit(1)\n%x('ls -al /')\n\n# XXE Injection (XML)\n#\n#\tString which can reveal system files when parsed by a badly configured XML parser\n\n<?xml version=\"1.0\" encoding=\"ISO-8859-1\"?><!DOCTYPE foo [ <!ELEMENT foo ANY ><!ENTITY xxe SYSTEM \"file:///etc/passwd\" >]><foo>&xxe;</foo>\n\n#\tUnwanted Interpolation\n#\n#\tStrings which can be accidentally expanded into different strings if evaluated in the wrong context, e.g. used as a printf format string or via Perl or shell eval. Might expose sensitive data from the program doing the interpolation, or might just represent the wrong string.\n\n$HOME\n$ENV{'HOME'}\n%d\n%s\n{0}\n%*.*s\nFile:///\n\n#\tFile Inclusion\n#\n#\tStrings which can cause user to pull in files that should not be a part of a web server\n\n../../../../../../../../../../../etc/passwd%00\n../../../../../../../../../../../etc/hosts\n\n#\tKnown CVEs and Vulnerabilities\n#\n#\tStrings that test for known vulnerabilities\n\n() { 0; }; touch /tmp/blns.shellshock1.fail;\n() { _; } >_[$($())] { touch /tmp/blns.shellshock2.fail; }\n<<< %s(un='%s') = %u\n+++ATH0\n\n#\tMSDOS/Windows Special Filenames\n#\n#\tStrings which are reserved characters in MSDOS/Windows\n\nCON\nPRN\nAUX\nCLOCK$\nNUL\nA:\nZZ:\nCOM1\nLPT1\nLPT2\nLPT3\nCOM2\nCOM3\nCOM4\n\n# IRC specific strings\n#\n# Strings that may occur on IRC clients that make security products freak out\n\nDCC SEND STARTKEYLOGGER 0 0 0\n\n#\tScunthorpe Problem\n#\n#\tInnocuous strings which may be blocked by profanity filters (https://en.wikipedia.org/wiki/Scunthorpe_problem)\n\nScunthorpe General Hospital\nPenistone Community Church\nLightwater Country Park\nJimmy Clitheroe\nHorniman Museum\nshitake mushrooms\nRomansInSussex.co.uk\nhttp://www.cum.qc.ca/\nCraig Cockburn, Software Specialist\nLinda Callahan\nDr. Herman I. Libshitz\nmagna cum laude\nSuper Bowl XXX\nmedieval erection of parapets\nevaluate\nmocha\nexpression\nArsenal canal\nclassic\nTyson Gay\nDick Van Dyke\nbasement\n\n#\tHuman injection\n#\n#\tStrings which may cause human to reinterpret worldview\n\nIf you're reading this, you've been in a coma for almost 20 years now. We're trying a new technique. We don't know where this message will end up in your dream, but we hope it works. Please wake up, we miss you.\n\n#\tTerminal escape codes\n#\n#\tStrings which punish the fools who use cat/type on this file\n\nRoses are \u001b[0;31mred\u001b[0m, violets are \u001b[0;34mblue. Hope you enjoy terminal hue\nBut now...\u001b[20Cfor my greatest trick...\u001b[8m\nThe quic\b\b\b\b\b\bk brown fo\u0007\u0007\u0007\u0007\u0007\u0007\u0007\u0007\u0007\u0007\u0007x... [Beeeep]\n\n#\tiOS Vulnerabilities\n#\n#\tStrings which crashed iMessage in various versions of iOS\n\nPowerلُلُصّبُلُلصّبُررً ॣ ॣh ॣ ॣ冗\n🏳0🌈️\n"
},
{
"path": "SwiftHashTests/Info-Mac.plist",
"content": "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n\t<key>CFBundleDevelopmentRegion</key>\n\t<string>en</string>\n\t<key>CFBundleExecutable</key>\n\t<string>$(EXECUTABLE_NAME)</string>\n\t<key>CFBundleIdentifier</key>\n\t<string>$(PRODUCT_BUNDLE_IDENTIFIER)</string>\n\t<key>CFBundleInfoDictionaryVersion</key>\n\t<string>6.0</string>\n\t<key>CFBundleName</key>\n\t<string>$(PRODUCT_NAME)</string>\n\t<key>CFBundlePackageType</key>\n\t<string>BNDL</string>\n\t<key>CFBundleShortVersionString</key>\n\t<string>1.0</string>\n\t<key>CFBundleSignature</key>\n\t<string>????</string>\n\t<key>CFBundleVersion</key>\n\t<string>1</string>\n</dict>\n</plist>\n"
},
{
"path": "SwiftHashTests/Info-iOS.plist",
"content": "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n\t<key>CFBundleDevelopmentRegion</key>\n\t<string>en</string>\n\t<key>CFBundleExecutable</key>\n\t<string>$(EXECUTABLE_NAME)</string>\n\t<key>CFBundleIdentifier</key>\n\t<string>$(PRODUCT_BUNDLE_IDENTIFIER)</string>\n\t<key>CFBundleInfoDictionaryVersion</key>\n\t<string>6.0</string>\n\t<key>CFBundleName</key>\n\t<string>$(PRODUCT_NAME)</string>\n\t<key>CFBundlePackageType</key>\n\t<string>BNDL</string>\n\t<key>CFBundleShortVersionString</key>\n\t<string>1.0</string>\n\t<key>CFBundleSignature</key>\n\t<string>????</string>\n\t<key>CFBundleVersion</key>\n\t<string>1</string>\n</dict>\n</plist>\n"
},
{
"path": "SwiftHashTests/Info-tvOS.plist",
"content": "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n\t<key>CFBundleDevelopmentRegion</key>\n\t<string>en</string>\n\t<key>CFBundleExecutable</key>\n\t<string>$(EXECUTABLE_NAME)</string>\n\t<key>CFBundleIdentifier</key>\n\t<string>$(PRODUCT_BUNDLE_IDENTIFIER)</string>\n\t<key>CFBundleInfoDictionaryVersion</key>\n\t<string>6.0</string>\n\t<key>CFBundleName</key>\n\t<string>$(PRODUCT_NAME)</string>\n\t<key>CFBundlePackageType</key>\n\t<string>BNDL</string>\n\t<key>CFBundleShortVersionString</key>\n\t<string>1.0</string>\n\t<key>CFBundleVersion</key>\n\t<string>1</string>\n</dict>\n</plist>\n"
},
{
"path": "SwiftHashTests/Tests.swift",
"content": "import XCTest\n@testable import SwiftHash\n\nclass Tests: XCTestCase {\n\n func testHelper() {\n XCTAssertEqual(str2rstr_utf8(\"hello\"), [104, 101, 108, 108, 111])\n\n let hello = str2rstr_utf8(\"hello\")\n let world = str2rstr_utf8(\"world\")\n let google = str2rstr_utf8(\"https://www.google.com\")\n\n XCTAssertEqual(rstr2tr(hello), \"hello\")\n XCTAssertEqual(rstr2tr(world), \"world\")\n XCTAssertEqual(rstr2tr(google), \"https://www.google.com\")\n\n XCTAssertEqual(rstr2binl(hello), [1819043176, 111])\n XCTAssertEqual(rstr2binl(world), [1819438967, 100])\n XCTAssertEqual(rstr2binl(google), [1886680168, 791624307, 779581303, 1735356263, 1663985004, 28015])\n\n XCTAssertEqual(rstr2hex(hello), \"68656C6C6F\")\n XCTAssertEqual(rstr2hex(world), \"776F726C64\")\n XCTAssertEqual(rstr2hex(google), \"68747470733A2F2F7777772E676F6F676C652E636F6D\")\n\n XCTAssertEqual(Int32(-991732713) << Int32(12), 901869568)\n XCTAssertEqual(Int32(991732713) << Int32(12), -901869568)\n XCTAssertEqual(zeroFillRightShift(-991732713, (32 - 12)), 3150)\n\n XCTAssertEqual(bit_rol(1589092186, 17), 1052032367)\n XCTAssertEqual(bit_rol(-991732713, 12), 901872718)\n\n XCTAssertEqual(md5_cmn(-617265063, -615378706, -617265106, 0, 17, -1473231341), 434767261)\n\n XCTAssertEqual(md5_ff(271733878, -615343318, -271733879, -1732584194, 32879, 12, -389564586), 286529400)\n\n XCTAssertEqual(binl_md5(rstr2binl(hello), hello.count * 8), [708854109, 1982483388, -1851952711, -1832577264])\n XCTAssertEqual(binl_md5(rstr2binl(world), world.count * 8), [925923709, -2046724448, -2113778857, -415894286])\n }\n\n func testMD5() {\n XCTAssertEqual(MD5(\"hello\"),\n \"5D41402ABC4B2A76B9719D911017C592\")\n XCTAssertEqual(MD5(\"world\"),\n \"7D793037A0760186574B0282F2F435E7\")\n XCTAssertEqual(MD5(\"https://www.google.com\"),\n \"8FFDEFBDEC956B595D257F0AAEEFD623\")\n XCTAssertEqual(MD5(\"https://www.google.com/logos/doodles/2016/parents-day-in-korea-5757703554072576-hp2x.jpg\"),\n \"0DFB10E8D2AE771B3B3ED4544139644E\")\n XCTAssertEqual(MD5(\"https://unsplash.it/600/300/?image=1\"),\n \"D59E956EBB1BE415970F04EC77F4C875\")\n XCTAssertEqual(MD5(\"\"),\n \"D41D8CD98F00B204E9800998ECF8427E\")\n XCTAssertEqual(MD5(\"ABCDEFGHIJKLMNOPQRSTWXYZ1234567890\"),\n \"B8F4F38629EC4F4A23F5DCC6086F8035\")\n XCTAssertEqual(MD5(\"abcdefghijklmnopqrstwxyz1234567890\"),\n \"B2E875F4D53CCF6CEFB5CDA3F86FC542\")\n XCTAssertEqual(MD5(\"0123456789\"),\n \"781E5E245D69B566979B86E28D23F2C7\")\n XCTAssertEqual(MD5(\"0\"),\n \"CFCD208495D565EF66E7DFF9F98764DA\")\n XCTAssertEqual(MD5(\"https://twitter.com/_HairForceOne/status/745235759460810752\"),\n \"40C2BFA3D7BFC7A453013ECD54022255\")\n XCTAssertEqual(MD5(\"Det er et velkjent faktum at lesere distraheres av lesbart innhold på en side når man ser på dens layout. Poenget med å bruke Lorem Ipsum er at det har en mer eller mindre normal fordeling av bokstaver i ord, i motsetning til 'Innhold her, innhold her', og gir inntrykk av å være lesbar tekst. Mange webside- og sideombrekkingsprogrammer bruker nå Lorem Ipsum som sin standard for provisorisk tekst\"),\n \"6B2880BCC7554CF07E72DB9C99BF3284\")\n XCTAssertEqual(MD5(\"\\\\\"),\n \"28D397E87306B8631F3ED80D858D35F0\")\n XCTAssertEqual(MD5(\"http://res.cloudinary.com/demo/image/upload/w_300,h_200,c_crop/sample.jpg\"),\n \"6E30D9CC4C08BE4EEA49076328D4C1F0\")\n XCTAssertEqual(MD5(\"http://res.cloudinary.com/demo/image/upload/x_355,y_410,w_300,h_200,c_crop/brown_sheep.jpg\"),\n \"019E9D72B5AF84EF114868875C1597ED\")\n XCTAssertEqual(MD5(\"http://www.w3schools.com/tags/html_form_submit.asp?text=Hello+G%C3%BCnter\"),\n \"C89A2146CD3DF34ECDA86B6E0709B3FD\")\n XCTAssertEqual(MD5(\"!%40%23%24%25%5E%26*()%2C.%3C%3E%5C'1234567890-%3D\"),\n \"09A1790760693160E74B9D6FCEC7EF64\")\n }\n\n func testMD5_Data() {\n let data = \"https://www.google.com\".data(using: String.Encoding.utf8)\n XCTAssertEqual(MD5(String(data: data!, encoding: String.Encoding.utf8)!),\n \"8FFDEFBDEC956B595D257F0AAEEFD623\")\n }\n\n func testNaughtyStrings() {\n let path = Bundle(for: Tests.self).path(forResource: \"naughty_strings\", ofType: \"txt\")!\n let content = try! String(contentsOfFile: path, encoding: .utf8)\n let lines = content.components(separatedBy: .newlines)\n\n lines.forEach { line in\n let md5 = MD5(line)\n XCTAssertEqual(md5.count, 32)\n }\n }\n}\n"
},
{
"path": "script.sh",
"content": "#!/bin/sh\n\ncurl -o ./SwiftHashTests/Fixture/naughty_string.txt -k https://raw.githubusercontent.com/minimaxir/big-list-of-naughty-strings/master/blns.txt"
}
]![](\"https://img.shields.io/badge/%20in-swift%204.0-orange.svg\"){kind=icon}
\n\n\n\n## MD5\n\n```swift\nMD5(\"https://www.google.com\") // 8FFDEFBDEC956B595D257F0AAEEFD623\nMD5(\"https://unsplash.it/600/300/?image=1\") // D59E956EBB1BE415970F04EC77F4C875\n```\n\n## Installation\n\n#### CocoaPods\n**SwiftHash** is available through [CocoaPods](http://cocoapods.org). To install\nit, simply add the following line to your Podfile:\n\n```ruby\npod 'SwiftHash'\n```\n\n#### Carthage\n**SwiftHash** is also available through [Carthage](https://github.com/Carthage/Carthage).\nTo install just write into your Cartfile:\n\n```ruby\ngithub \"onmyway133/SwiftHash\"\n```\n\n#### Manually\n1. Download and drop ```/Sources``` folder in your project. \n2. Congratulations! \n\n#### Import on your swift file\n```\nimport SwiftHash \n```\n\n## Author\n\nKhoa Pham, onmyway133@gmail.com\n\n## Credit\n\n- MD5 based on http://pajhome.org.uk/crypt/md5/md5.html\n\n## Contributing\n\nWe would love you to contribute to **SwiftHash**, check the [CONTRIBUTING](https://github.com/onmyway133/SwiftHash/blob/master/CONTRIBUTING.md) file for more info.\n\n## License\n\n**SwiftHash** is available under the MIT license. See the [LICENSE](https://github.com/onmyway133/SwiftHash/blob/master/LICENSE.md) file for more info.\n"
},
{
"path": "Sources/MD5.swift",
"content": "/*\n * A JavaScript implementation of the RSA Data Security, Inc. MD5 Message\n * Digest Algorithm, as defined in RFC 1321.\n * Version 2.2 Copyright (C) Paul Johnston 1999 - 2009\n * Other contributors: Greg Holt, Andrew Kepert, Ydnar, Lostinet\n * Distributed under the BSD License\n * See http://pajhome.org.uk/crypt/md5 for more info.\n */\n\n/**\n * SwiftHash\n * Copyright (c) Khoa Pham 2017\n * Licensed under the MIT license. See LICENSE file.\n */\n\nimport Foundation\n\n// MARK: - Public\n\npublic func MD5(_ input: String) -> String {\n return hex_md5(input)\n}\n\n// MARK: - Functions\n\nfunc hex_md5(_ input: String) -> String {\n return rstr2hex(rstr_md5(str2rstr_utf8(input)))\n}\n\nfunc str2rstr_utf8(_ input: String) -> [CUnsignedChar] {\n return Array(input.utf8)\n}\n\nfunc rstr2tr(_ input: [CUnsignedChar]) -> String {\n var output: String = \"\"\n\n input.forEach {\n output.append(String(UnicodeScalar($0)))\n }\n\n return output\n}\n\n/*\n * Convert a raw string to a hex string\n */\nfunc rstr2hex(_ input: [CUnsignedChar]) -> String {\n let hexTab: [Character] = [\"0\", \"1\", \"2\", \"3\", \"4\", \"5\", \"6\", \"7\", \"8\", \"9\", \"A\", \"B\", \"C\", \"D\", \"E\", \"F\"]\n var output: [Character] = []\n\n for i in 0..