中国网络渗透测试联盟

标题: 爆破、破解Disduz x 2.5 md5(md5(pass)$salt)密码加密 [打印本页]
作者: admin    时间: 2013-2-14 00:03
标题: 爆破、破解Disduz x 2.5 md5(md5(pass)$salt)密码加密
测试环境5 S1 `" Z) Z2 A3 P" Q
OS 名称: Microsoft® Windows Server® 2008 Enterprise3 q/ a" {) S4 l  E5 d% N
OS 版本: 6.0.6001 Service Pack 1 Build 6001' u8 R# r8 S, ~  q; @5 [
OS 制造商: Microsoft Corporation, R4 F* {% [& T8 A4 E2 I0 E
OS 配置: 独立服务器
7 H/ B: S% {5 V8 ROS 构件类型: Multiprocessor Free5 f: q4 b' ]3 e+ n! a  I" A& u
注册的所有人: Windows 用户
' E& N1 {6 ^$ d* d系统型号: PowerEdge R620
- @- w8 e( T9 O' v$ a系统类型: x64-based PC( m, ^* u4 h; |/ ]( \5 D  A5 Q3 _
处理器: 安装了 1 个处理器。
9 f- t1 ~6 p/ U+ c. m[01]: Intel64 Family 6 Model 45 Stepping 7 GenuineIntel ~2400# x" Z2 T8 V0 e- K. [! a
cat md5.txt
( [7 |1 C+ p) r5 F' L* a3fb78e9bc0b297e3de4e77531766c37a:f29f95 /* = md5中无法查询的。*// Q, T! [4 Q( p/ n, c
865a697fb9b4bd9c6737432aaff136bd:22dc87 /* = 304892415 */
* [9 q$ `9 H+ e9 ~. t" h8 h15b7a21513f24ffe97d9f9830acf51ad:07626c /* = 123456 */+ p4 z, `" w! ~
/* -a 使用穷举模式 -m HASH的类型是VB DISCUZ跟DV加密是一样，?d是代表数字 穷举10个数字 */ hashcat-cli64.exe -a 3 -m 2611 md5.txt ?d?d?d?d?d?d?d?d?d?d
5 t" k8 M! O) D" u: K6 jInput.Mode: Mask (?d?d?d?d?d)! \& _) u9 {4 F( _. i
Index…..: 0/1 (segment), 100000 (words), 0 (bytes)% ?9 @0 O# Q& a& z' a9 g, l- Y
Recovered.: 0/3 hashes, 0/3 salts3 L3 C; x3 M7 @' V# L9 S( d
Speed/sec.: – plains, – words( }% R* v# a. }
Progress..: 100000/100000 (100.00%)
0 c2 O) B; L6 aRunning…: –:–:–:–
6 i4 e+ K2 f- L; j$ @Estimated.: –:–:–:–
7 X5 S7 E2 u' |% J0 P( K+ Q$ U15b7a21513f24ffe97d9f9830acf51ad:07626c:123456! ^" F- c6 U! d/ G+ q' {) D
Input.Mode: Mask (?d?d?d?d?d?d)
+ ~6 P" D( D. n$ a! aIndex…..: 0/1 (segment), 1000000 (words), 0 (bytes)
8 a9 }$ N# H0 j. z$ y9 T0 o/ fRecovered.: 1/3 hashes, 1/3 salts* h4 |$ ^! p% I; q  V
Speed/sec.: 7.43M plains, 3.72M words
  t4 i' e( D  e$ k% CProgress..: 1000000/1000000 (100.00%)( b0 n9 f* W/ L3 c
Running…: 00:00:00:01
! r$ d8 k1 o, X0 e. c8 c3 e; YEstimated.: –:–:–:–. C- n" B4 Z$ }$ i7 S' o3 T
Input.Mode: Mask (?d?d?d?d?d?d?d)
1 |4 }) ~, D4 b% f/ N3 MIndex…..: 0/1 (segment), 10000000 (words), 0 (bytes)* B0 p. ]* z* v% }5 l9 z% `9 s# y
Recovered.: 1/3 hashes, 1/3 salts, S/ _& v( s5 \. z' x
Speed/sec.: 13.67M plains, 6.83M words
. C& A% V$ y7 v* J1 }- r8 cProgress..: 10000000/10000000 (100.00%)
) ?1 J' u5 X+ l: T( X& m- c3 o3 D) V3 ORunning…: 00:00:00:01: _' @6 G- k% ?  t
Estimated.: –:–:–:–
8 l2 |0 o3 O9 ]6 N; r; @2 EInput.Mode: Mask (?d?d?d?d?d?d?d?d)3 ]* U, f8 a  J
Index…..: 0/1 (segment), 100000000 (words), 0 (bytes)
/ C+ M) p0 i  D- `; n5 WRecovered.: 1/3 hashes, 1/3 salts
8 h* z- Y7 g) H7 P8 j+ R' c9 oSpeed/sec.: 18.59M plains, 9.29M words9 l" E% V* Y/ A. C
Progress..: 100000000/100000000 (100.00%), M( t2 D! D) v1 q( C/ F% [) ^
Running…: 00:00:00:118 S7 F6 b- J5 a. s& y
Estimated.: –:–:–:–
5 @7 x1 d* B' @865a697fb9b4bd9c6737432aaff136bd:22dc87:304892415
. ^* s5 M' ?( c. |4 C0 \! e可以看到破解 9位3开纯数字密码需要11秒。
+ t/ s# \! a' R4 ?. ^9 |% L, C! yInput.Mode: Mask (?d?d?d?d?d?d?d?d?d?d)
! w. {/ f/ v! _Index…..: 0/1 (segment), 10000000000 (words), 0 (bytes)+ y0 _8 n! q9 B6 ]7 m! R
Recovered.: 2/3 hashes, 2/3 salts5 T, a+ {; r6 {# s' U& s7 H; @
Speed/sec.: 12.70M plains, 12.70M words) a3 E0 w$ v& V$ b& Y5 R+ a" a
Progress..: 10000000000/10000000000 (100.00%)
, I: N" a: t# F, ^: R; LRunning…: 00:00:13:07
0 l$ V# s0 F& C- v; a/ nEstimated.: –:–:–:–
, f% |; l$ _' T而10个数字即需要13分钟，这样的速度如果有服务器是8核或更多，或者自己GPU强劲，会更加快，我测试只是用了一个入门级的CPU。
6 T( E6 }2 g2 W! |在这里可以下载到一些字典，不过国人对这些字典貌似无视。
5 [: @' z4 o, ~3 I1 ^http://blog.g0tmi1k.com/2011/06/dictionaries-wordlists.html



欢迎光临 中国网络渗透测试联盟 (https://cobjon.com/) Powered by Discuz! X3.2