type-juggling

What problem does it solve?

PHP type juggling and weak comparisons allow bypasses in authentication and signature checks. This skill helps identify and understand these patterns so you can defend or test code paths that rely on loose equality rather than strict types.

Core Features & Use Cases

• Understand how PHP's loose comparison operates across types, including numeric strings, arrays, and nulls, and how this can lead to bypasses in login, token validation, and HMAC checks.
• Recognize and exploit magic hash collisions (0e… patterns) and related pitfalls to test the robustness of authorization logic.
• Provide defensive guidance: prefer strict comparisons and timing-safe checks (hash_equals) to mitigate these risks in PHP applications.

Quick Start

Test a PHP snippet that compares two values with loose equality to observe how different inputs can be treated as equal and reproduced by magic-hash patterns.