SKILL: PHP Type Juggling — Weak Comparison & Magic Hash Bypass AI LOAD INSTRUCTION : PHP coercion, magic hashes ( ), HMAC/hash loose checks, NULL from bad types, and CTF-style / / tricks. Use strict routing: map the sink ( vs ), PHP major version, and whether both operands are attacker-controlled. Routing note: when you encounter PHP login/signature logic or code like , start with this skill; if / is already used, this path usually does not apply. 0. QUICK START First-pass goal : prove the server branch treats unequal secrets/tokens as equal via coercion, not guess the real password. First-pa…