lang:

Java

regex:

\.getInstance\s?\(\s?\"(MD5|SHA-1)\"

description:

MD5 and SHA-1 hashing algorithms are no longer considered secure and a safe alternative should be used instead.
tags:
weak hash algorithm
results