# corkami/collisions

Hash collisions and exploitations

Repository: https://github.com/corkami/collisions
Canonical: https://ross.abutalabs.com/products/collisions
Language: Python
License Family: other
Topics: collisions, hash, md5, sha1, exploitation, scripts
Last push: 2025-02-20T08:06:40+00:00

## Health v2 (maintenance only)
Score: 35/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 7, release rhythm 35, longevity 100
- inputs: {"age_days": 2774, "days_push": 559, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3397, forks 209 (observed 2026-08-28T04:08:02.633894+00:00)

## What it is
A collection of hash collision tools, scripts, and examples by Ange Albertini and Marc Stevens, demonstrating MD5 and SHA1 collision attacks and how they can be exploited in common file formats like PDF, JPG, and PE. It includes format-specific Python scripts to generate instant colliding file pairs and documentation of attack techniques.

## Use cases
- generate two different files with the same MD5 hash
- create colliding PDF or JPG files for a security demo
- learn how chosen-prefix hash collision attacks work
- test whether a file format tolerates appended collision data
- demonstrate weaknesses of MD5-based file integrity checks
- study real-world hash collision exploitation examples

## When to choose
- you need to generate or demonstrate MD5 or SHA1 collisions in common file formats
- you are researching or teaching cryptographic hash weaknesses
- you want to test systems relying on MD5/SHA1 for file identity

## When to avoid
- you need to forge a file matching an arbitrary given hash - that is not possible
- you need practical SHA1 collision generation on consumer hardware
- you need a production hashing library rather than attack tooling

## Facets
- artifact type: learning-resource
- maturity: active
- function: security, cryptography, developer-tools
- domain: security, developer-tools
- platform: python, cross-platform
- tags: hash-collisions, md5, sha1, cryptography-attacks, educational, file-formats, cryptography

## Member repositories
- corkami/collisions (main) score 35

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:08:02.633894+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T18:38:48.058461+00:00, confidence not recorded.
  - readme: https://github.com/corkami/collisions (fetched 2026-08-28T04:08:02.633894+00:00, sha b8e7dde7ba33)
- Data as of 2026-08-30T08:39:29.467469+00:00.