Skip to content

Instantly share code, notes, and snippets.

@stevepiercy
Created January 23, 2017 22:06
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save stevepiercy/5b8dd3d67edf7aa61671395d3ea167ab to your computer and use it in GitHub Desktop.
Save stevepiercy/5b8dd3d67edf7aa61671395d3ea167ab to your computer and use it in GitHub Desktop.
A failed attempt to demonstrate the knop_seed and blowfish_encrypt bug
<?lasso
// Demo of blowfish issue
define knop_seedbug => {
local('seed'= string( server_ip) + string( server_name) + response_localpath)
#seed -> removetrailing(response_filepath)
return #seed
}
define knop_blowfishbug => type {
data public lock_seed::string
public oncreate() => {
.'lock_seed' = knop_seed
}
public bug() => {
local(
lock = null,
lockvalue='kf6SGKT//LEWzqrC',
lockfield = string,
// lock_seed = knop_seed,
lock_seed = knop_seedbug,
record_lock = '1|1485205046',
)
return decrypt_blowfish(decode_base64(#lockvalue), -seed = .'lock_seed')
}
}
// date
// '<br>'
// decrypt_blowfish(decode_base64(#lockvalue), -seed = #lock_seed)
// '<br>'
date
'<br>'
local(b) = knop_blowfishbug()
#b -> bug
?>
<!--
kf6SGKT//LEWzqrC | ������Ϊ� | ="㢶(2hƆ= | ="㢶(2hƆ= | string | string |
127.0.0.1knop9//Users/stevepiercy/projects/knop-project/knop9/demo
| true 9999
-->
@stevepiercy
Copy link
Author

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment