search

jmcerrejon / PiKISS

PiKISS for Raspberry Pi: A bunch of scripts with menu to make your life easier.
http://misapuntesde.com
MIT License
880 stars 92 forks source link

insecureHash #133

Open Abelkrijgtalles opened 2 years ago

Abelkrijgtalles commented 2 years ago

hashlib.md5 is insecure. Consider changing it to a secure hashing algorithm (e.g. SHA256). res/groove.py Line 57 p["parameters"]["secretKey"] =hashlib.md5(h["session"]).hexdigest()