-
Notifications
You must be signed in to change notification settings - Fork 26
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Random generator #17
Comments
Interesting do you think it’s possible to fix? If your on telegram we’ve got a group discussion going your more than welcome to join https://t.me/+2Drmjbwu8fk1MjQ0 |
generating random numbers through "class SecureRandom" and provision of seed value can create deterministic result. means we can get same result of random numbers for same seed value and then our PRIZE also if we are lucky in finding correct seed value. But then main issue is this code will work only if any vulnerable site used same process as "class SecureRandom" (finding or guessing exact creation date as seed time is next distant step). So the code will be different for each site ? |
Hi if you want to discuss with others you can join us on telegram https://t.me/+2LNzborOVN1iOGI0 |
@XorkrX |
As it stands, the random generator implemented in the script is not even close to Math.random function that was used in JS.
You are using random.randit and that drastically differs from the Math.random.
Also, you are generating 1 hex key per seed, not knowing what values were generated by math.random before the output was thrown into Arcfour with the seed.
The text was updated successfully, but these errors were encountered: