Collisions examples

MD5

Wang (2005): wang1.bin / wang2.bin

Apop (2008): apop-1.bin / apop-2.bin

Rogue CA (2008): real / rogue

Flame (2012): certificate

FastColl

single frame GIF: collision1.gif / collision2.gif (recording)

UniColl

JPG: collision1.jpg / collision2.jpg - tldr-1.jpg / tldr-2.jpg

PDF: collision1.pdf / collision2.pdf

PNG:

• generic headers (not OS X compatible): collision1.png / collision2.png (recording)
• specific headers (same metadata): 0a959025-1.png / 0a959025-2.png - aac2423a-1.png / aac2423a-2.png (recordings: 1-with UniColl / 2-precomputed)

JP2: collision1.jp2 / collision2.jp2

MP4:

• generic header, 32b length (LTV): collision1.mp4 / collision2.mp4
• generic header, 64b length (TLV): collisionl1.mp4 / collisionl2.mp4
  • specific header: collisions1.mp4 / collisions2.mp4

Strategies:

• Good/bad contents (gotta catch 'em all): gcea1.png / gcea2.png
• Valid/Invalid: png-valid.png / png-invalid.png

Multiple UniColl

poeMD5 (not Adobe compatible by accident): poeMD5_A.pdf / poeMD5_B.pdf

ZIP: collision1.zip / collision2.zip

HashClash

Zip-based:

• 3mf: collision-1.3mf / collision-2.3mf
• Epub: colllision-1.epub / colllision-2.epub
• Xps: colllision-1.xps / colllision-2.xps

PE: collision1.exe / collision2.exe

polycolls

• JPG / PE: jpg-pe.exe / jpg-pe.jpg
• PE / PDF: pepdf.exe / pepdf.pdf
• PNG / PDF: png-pdf.pdf / png-pdf.png
• PE / MP4 / PDF / PNG: pileup.exe / pileup.mp4 / pileup.pdf / pileup.png

plain collisions

FastColl: fastcoll1.bin / fastcoll2.bin

HashClash 9 blocks cpc1.bin / cpc2.bin - 1 block (2009) single-cpc1.bin / single-cpc2.bin

Single IPC (2012): single-ipc1.bin / single-ipc2.bin

SHA1 (Shattered)

JPGs in PDF:

• multiple clipped images: shattered1.pdf / shattered2.pdf

JPG as page contents (desktop only, not browser):

• as page content: jpgpage1.pdf / jpgpage2.pdf
• as image and page content: dualjpg1.pdf / dualjpg2.pdf

others

• prefix-switching payload for HTML polyglot polyglot.html
• JPG file with 20 custom scans 20scans.jpg