CVE-2006-4068

pswd.js - Weak Hashing Scheme Enabling Offline Brute Force Attacks

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-4068. PoCs published by Gianstefano Monni.

AI-analyzed exploit summary This exploit demonstrates a weakness in the password hashing mechanism of pswd.js, allowing attackers to precompute password hashes for brute-force attacks. It processes a wordlist to find matching hashes for hardcoded usernames.

Description

The pswd.js script relies on the client to calculate whether a username and password match hard-coded hashed values for a server, and uses a hashing scheme that creates a large number of collisions, which makes it easier for remote attackers to conduct offline brute force attacks. NOTE: this script might also allow attackers to generate the server-side "secret" URL without determining the original password, but this possibility was not discussed by the original researcher.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Gianstefano Monni · cwebappsmultiple
https://www.exploit-db.com/exploits/28340

This exploit demonstrates a weakness in the password hashing mechanism of pswd.js, allowing attackers to precompute password hashes for brute-force attacks. It processes a wordlist to find matching hashes for hardcoded usernames.

Classification
Working Poc 90%
Attack Type
Auth Bypass
Complexity
Moderate
Reliability
Reliable
Target: Applications using pswd.js (version not specified)
No auth needed
Prerequisites: Access to the target application's password hashes · A wordlist for brute-forcing
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/19333
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/1362
Exploit, Vendor Advisory mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/442120

Scores

EPSS 0.0268
EPSS Percentile 83.9%

Details

CWE
CWE-255
Status published
Products (1)
pswd.js/pswd.js
Published Aug 10, 2006
Tracked Since Feb 18, 2026