[zomgwtfbbq]

Added:

• Array of pre-defined wordlists named $files (add wordlist locations there)
  
• SELECT tag where user chooses the wordlist (This tag is automatically generated from the $files array).
  
• Secured passing of values. Now only integer values can be submitted as wordlist
  

Unfortunately, it looks like I broke the design a bit. I'm sorry for that!
The script right now is not vulnerable to XSS nor file location brute-force

Great to see members here helping each other that much. I like your approach, however I would do it a bit different:

- get the files from a folder eg /wordlists

PHP Code:

<?php
function GetFilesByDirectory($sDir){

    if(!$rHandle = @opendir($sDir)){
        return(false);
    }
    $aFileBuffer = array();
    while(false!==($sFile = @readdir($rHandle))){
        // buffer all files
        if($sFile!="." && $sFile!=".."){
            if(!is_dir($sDir."/".$sFile)){
                $aFileBuffer[] .= $sFile;
            }
        }
    }
    @closedir($rHandle);
    return $aFileBuffer;
}
?>

..then you can check if the file name is in the array.

- you don't have to use regular expressions to filter for integers

PHP Code:

<?php
$iVal = "11";
if(@is_int(intval($iVal))){
    echo"casted to int";
}
else{
    echo"not an int value";
}
?>

---

BTW I just noticed the thread's title is md5/sha1 cracker. I assume you know that md5 is different from sha1?

[1llusion]

- you don't have to use regular expressions to filter for integers

PHP Code:

<?php
$iVal = "11";
if(@is_int(intval($iVal))){
    echo"casted to int";
}
else{
    echo"not an int value";
}
?>

Note added! Thanks for pointing this out I'll update my code later.

About the function, I tried to make as little changes as possible, your approach would be ofc better

[zomgwtfbbq]

About the function, I tried to make as little changes as possible

Lol I understand that. With my first edit of his code, I just wanted to make it working, didn't realize he was going to put it online.

[noize]

About the function, I tried to make as little changes as possible

Lol I understand that. With my first edit of his code, I just wanted to make it working, didn't realize he was going to put it online.

Well, I mainly put it online so that people passing by may also view the result.
And also, shouldn't I know that MD5 is different from SHA1?

[zomgwtfbbq]

And also, shouldn't I know that MD5 is different from SHA1?

Ohw never mind, I see you put it separate. You can make it a lot easier for yourself if you put it in one file. Just a add a select field in the form where you can switch between sha1 and md5. Then you can handle it easy like:

PHP Code:

<?php
$sFunction = ($_POST['sEnc']=="md5" ? "md5" : "sha1");

// look up the line
if(md5($line)==$hash){}
// change into
if($sFunction($line)==$hash){}
?>

[noize]

And also, shouldn't I know that MD5 is different from SHA1?

Ohw never mind, I see you put it separate. You can make it a lot easier for yourself if you put it in one file. Just a add a select field in the form where you can switch between sha1 and md5. Then you can handle it easy like:

PHP Code:

<?php
$sFunction = ($_POST['sEnc']=="md5" ? "md5" : "sha1");

// look up the line
if(md5($line)==$hash){}
// change into
if($sFunction($line)==$hash){}
?>

Yeah, I had thought to do it like that, which would be easier as by editing code I'd edit it in one file only, and not two.
But actually, I think I like the design better this way.
Thanks, anyhow