GeorgeArgyros/php-taint
Taint is a PHP extension, used for detecting XSS codes
Snowflake is a tool for exploiting randomness vulnerabilities by seed recovery attacks targetting the rand() and mt_rand() generators in PHP applications.
This repository is cataloged as part of our automated global GitHub synchronization. Full telemetry, velocity snapshots, and code summaries are scheduled for continuous enrichment.
Taint is a PHP extension, used for detecting XSS codes
Although the Mersenne Twister PRNG is by design not cryptographically secure many applications tend to use it for cryptographic operations. The mt_derand project provides code to invert the Mersenne Twister generator and obtain its internal state which in turn can be used to predict all future outputs of the generator.
This code provides a function to generate ,lightweight, cryptographically secure random bytes in all versions of PHP. It makes use of different secure functions or operating system randomness. If non is available then a clock drift algorithm is used to generate entropy. The function is tested in Ubuntu/Debian Linux, Sun Solaris and Windows XP/2003.