中国网络渗透测试联盟

标题: 爆破、破解Disduz x 2.5 md5(md5(pass)$salt)密码加密 [打印本页]
作者: admin    时间: 2013-2-14 00:03
标题: 爆破、破解Disduz x 2.5 md5(md5(pass)$salt)密码加密
测试环境, m" {- x9 e, d1 b0 a: M% O
OS 名称: Microsoft® Windows Server® 2008 Enterprise' Y: _- Y4 M1 I, Q9 y
OS 版本: 6.0.6001 Service Pack 1 Build 6001
4 Z0 l- f& j% z& eOS 制造商: Microsoft Corporation
0 C5 s: j8 x% T6 `# GOS 配置: 独立服务器4 e* f* R1 b1 v( J0 i; a2 A- v
OS 构件类型: Multiprocessor Free+ w9 T  B$ Y6 X- C. T
注册的所有人: Windows 用户4 m! g; v$ I/ h, q/ r
系统型号: PowerEdge R620
6 U- e; v( @3 D6 y& q' a; j% J" l系统类型: x64-based PC
( S  z# s; Z3 d6 g# U/ d处理器: 安装了 1 个处理器。
( L, c# S1 \; d* E[01]: Intel64 Family 6 Model 45 Stepping 7 GenuineIntel ~2400
- |9 `( e4 e) {6 @0 p# [! mcat md5.txt
7 F" I, E2 N. l3 N. z9 R, R( }3fb78e9bc0b297e3de4e77531766c37a:f29f95 /* = md5中无法查询的。*/
. L' Z& `' r( ]4 Y6 T865a697fb9b4bd9c6737432aaff136bd:22dc87 /* = 304892415 */( x% X: H- @! [: h) M
15b7a21513f24ffe97d9f9830acf51ad:07626c /* = 123456 */
8 J) @; B8 u: n/ a/ ` /* -a 使用穷举模式 -m HASH的类型是VB DISCUZ跟DV加密是一样，?d是代表数字 穷举10个数字 */ hashcat-cli64.exe -a 3 -m 2611 md5.txt ?d?d?d?d?d?d?d?d?d?d
5 p8 P. ^2 J1 oInput.Mode: Mask (?d?d?d?d?d)
& R1 A1 l. h8 v: A6 I* }Index…..: 0/1 (segment), 100000 (words), 0 (bytes)9 k# Q0 C8 o( v" X* G$ \/ }
Recovered.: 0/3 hashes, 0/3 salts: A. s: W0 x% @% E3 m  B/ O
Speed/sec.: – plains, – words) o0 d/ S1 B" h0 T+ o
Progress..: 100000/100000 (100.00%)
% d, B5 [/ X- y% d$ U$ W" o3 ARunning…: –:–:–:–
' L* j' ?) J  \# a1 dEstimated.: –:–:–:–/ p3 u" t8 G- Z; x! @: b
15b7a21513f24ffe97d9f9830acf51ad:07626c:123456
' L+ Z* Z' k3 Q1 I  ^1 }( qInput.Mode: Mask (?d?d?d?d?d?d)4 R& ]- m( e% e$ I) z5 K/ o
Index…..: 0/1 (segment), 1000000 (words), 0 (bytes)
* O+ t& H$ G) U3 i3 o+ d% gRecovered.: 1/3 hashes, 1/3 salts
1 s2 g6 c6 z+ q! |- Z0 [Speed/sec.: 7.43M plains, 3.72M words9 {- ^3 j6 U) e* b
Progress..: 1000000/1000000 (100.00%)
2 {, {2 g% @+ j+ X8 s, C$ K: rRunning…: 00:00:00:01& ^2 Z( `4 x9 c
Estimated.: –:–:–:–
& {2 {* C. L2 Y& P$ r8 x" SInput.Mode: Mask (?d?d?d?d?d?d?d)
8 D# r/ U3 Q* Q8 B% v& s5 sIndex…..: 0/1 (segment), 10000000 (words), 0 (bytes)
: M2 Q, Y" m& a, ORecovered.: 1/3 hashes, 1/3 salts
5 _- R* m1 K) |, Z6 T* ASpeed/sec.: 13.67M plains, 6.83M words
3 K+ z( Q$ n( r! @2 T: KProgress..: 10000000/10000000 (100.00%)
) u0 R& |% F7 E4 r& sRunning…: 00:00:00:01
7 e% d8 g% w8 J$ A. T4 [Estimated.: –:–:–:–3 N6 j% _; Y! I; I# S' I
Input.Mode: Mask (?d?d?d?d?d?d?d?d). b# h* D+ I1 |2 T' N% U! |
Index…..: 0/1 (segment), 100000000 (words), 0 (bytes)
- D$ ?# Z; s8 @" V6 {" T9 Z0 {Recovered.: 1/3 hashes, 1/3 salts
% D; h0 U1 Y, JSpeed/sec.: 18.59M plains, 9.29M words
! @% o4 K5 A6 i# c+ u' IProgress..: 100000000/100000000 (100.00%)0 K% V, \* d; T' Y% G) Q
Running…: 00:00:00:11
+ l9 Q* {/ V# d& ?$ v) T' @) h' ]% D9 `Estimated.: –:–:–:–& q/ @& f2 [1 D
865a697fb9b4bd9c6737432aaff136bd:22dc87:304892415
" O) j5 b* ?1 P/ [8 k可以看到破解 9位3开纯数字密码需要11秒。
8 j; H- M: T$ x6 I8 m6 a$ oInput.Mode: Mask (?d?d?d?d?d?d?d?d?d?d); C6 i7 Q% x; ?7 j4 |
Index…..: 0/1 (segment), 10000000000 (words), 0 (bytes)* A/ M; h+ ^, B8 i" I7 g
Recovered.: 2/3 hashes, 2/3 salts* r4 q! z! s% o
Speed/sec.: 12.70M plains, 12.70M words
4 a) f& R; [/ m' _" J% j( H, ^Progress..: 10000000000/10000000000 (100.00%)
: ]' f2 N* K& ^  I9 x$ g+ ?! KRunning…: 00:00:13:07" x$ C& s' ]3 C2 g& I& i6 p4 m% x. J, {
Estimated.: –:–:–:–9 v' |8 g. i& g2 X% h4 T
而10个数字即需要13分钟，这样的速度如果有服务器是8核或更多，或者自己GPU强劲，会更加快，我测试只是用了一个入门级的CPU。
  H, P+ {% n8 w/ d% U; x! b" G; P在这里可以下载到一些字典，不过国人对这些字典貌似无视。" @" H' b. m3 T) l: B
http://blog.g0tmi1k.com/2011/06/dictionaries-wordlists.html



欢迎光临 中国网络渗透测试联盟 (https://cobjon.com/) Powered by Discuz! X3.2