爆破、破解Disduz x 2.5 md5(md5(pass)$salt)密码加密

admin

测试环境
9 N& p6 |) t% \5 [' AOS 名称: Microsoft® Windows Server® 2008 Enterprise
OS 版本: 6.0.6001 Service Pack 1 Build 6001
+ b2 u6 ^& t: ?' E( }' ~, VOS 制造商: Microsoft Corporation
8 u) L6 b+ I9 B0 KOS 配置: 独立服务器
OS 构件类型: Multiprocessor Free
注册的所有人: Windows 用户
系统型号: PowerEdge R620
7 B3 l2 w2 u+ s/ u- W系统类型: x64-based PC
6 M) |8 O* c, ]& ^处理器: 安装了 1 个处理器。
[01]: Intel64 Family 6 Model 45 Stepping 7 GenuineIntel ~2400
cat md5.txt
5 k2 x4 F5 o' V5 i7 c4 I* d: s! K3fb78e9bc0b297e3de4e77531766c37a:f29f95 /* = md5中无法查询的。*/
865a697fb9b4bd9c6737432aaff136bd:22dc87 /* = 304892415 */
/ W/ E4 {* N4 M' f15b7a21513f24ffe97d9f9830acf51ad:07626c /* = 123456 */
/* -a 使用穷举模式 -m HASH的类型是VB DISCUZ跟DV加密是一样，?d是代表数字 穷举10个数字 */ hashcat-cli64.exe -a 3 -m 2611 md5.txt ?d?d?d?d?d?d?d?d?d?d
Input.Mode: Mask (?d?d?d?d?d)
7 t0 Y  S* s8 N% w% RIndex…..: 0/1 (segment), 100000 (words), 0 (bytes)
! q9 R. H; _$ S8 g3 BRecovered.: 0/3 hashes, 0/3 salts
* y, @- m" m: ~/ J! _Speed/sec.: – plains, – words
Progress..: 100000/100000 (100.00%)
Running…: –:–:–:–
9 n, s# |2 D% {' O* i5 T, GEstimated.: –:–:–:–
3 E: q# I) _1 P/ ], }# k, i2 E15b7a21513f24ffe97d9f9830acf51ad:07626c:123456
# {" C2 a) }0 i+ lInput.Mode: Mask (?d?d?d?d?d?d)
Index…..: 0/1 (segment), 1000000 (words), 0 (bytes)
; c, {: ^* ?& Y1 ?' CRecovered.: 1/3 hashes, 1/3 salts
# G6 _6 g% _# c* R& C9 Z- p2 |1 `Speed/sec.: 7.43M plains, 3.72M words
Progress..: 1000000/1000000 (100.00%)
# }! B/ D) V4 `* K! a4 URunning…: 00:00:00:01
, c. E* }7 z, O- YEstimated.: –:–:–:–
0 H1 W2 n) R+ `1 Y; IInput.Mode: Mask (?d?d?d?d?d?d?d)
- g  _4 c* o. l; l- T/ h0 MIndex…..: 0/1 (segment), 10000000 (words), 0 (bytes)
Recovered.: 1/3 hashes, 1/3 salts
Speed/sec.: 13.67M plains, 6.83M words
5 I* {9 {+ o$ f& n& xProgress..: 10000000/10000000 (100.00%)
  i$ u! J9 u: U6 G8 |# k3 p% l4 nRunning…: 00:00:00:01
Estimated.: –:–:–:–
( g) t& {+ s; ^& XInput.Mode: Mask (?d?d?d?d?d?d?d?d)
* o# d2 q8 L, W; `" u. r' ]Index…..: 0/1 (segment), 100000000 (words), 0 (bytes)
Recovered.: 1/3 hashes, 1/3 salts
Speed/sec.: 18.59M plains, 9.29M words
: r- _" L/ u5 e$ sProgress..: 100000000/100000000 (100.00%)
Running…: 00:00:00:11
' K" h" K! W( c0 o! R2 _Estimated.: –:–:–:–
1 [* f6 {& J# |: W( k. X' R6 \865a697fb9b4bd9c6737432aaff136bd:22dc87:304892415
可以看到破解 9位3开纯数字密码需要11秒。
Input.Mode: Mask (?d?d?d?d?d?d?d?d?d?d)
Index…..: 0/1 (segment), 10000000000 (words), 0 (bytes)
- m0 H, r8 g$ V: H1 _/ i* k+ rRecovered.: 2/3 hashes, 2/3 salts
6 B& \7 S+ @# b  ZSpeed/sec.: 12.70M plains, 12.70M words
  I. k- T; h3 W4 L, J2 s3 ?+ iProgress..: 10000000000/10000000000 (100.00%)
Running…: 00:00:13:07
Estimated.: –:–:–:–
而10个数字即需要13分钟，这样的速度如果有服务器是8核或更多，或者自己GPU强劲，会更加快，我测试只是用了一个入门级的CPU。
2 M: a) O. y6 x, `; G7 j1 T在这里可以下载到一些字典，不过国人对这些字典貌似无视。
# l, o/ k  @. i7 Vhttp://blog.g0tmi1k.com/2011/06/dictionaries-wordlists.html