爆破、破解Disduz x 2.5 md5(md5(pass)$salt)密码加密

admin

测试环境
OS 名称: Microsoft® Windows Server® 2008 Enterprise
OS 版本: 6.0.6001 Service Pack 1 Build 6001
OS 制造商: Microsoft Corporation
7 a! b  _4 j. j, A, Z4 BOS 配置: 独立服务器
OS 构件类型: Multiprocessor Free
注册的所有人: Windows 用户
系统型号: PowerEdge R620
系统类型: x64-based PC
1 T, U" ^: C  Q3 R' H4 ?处理器: 安装了 1 个处理器。
[01]: Intel64 Family 6 Model 45 Stepping 7 GenuineIntel ~2400
% _3 ]9 ]. f1 b1 Acat md5.txt
3fb78e9bc0b297e3de4e77531766c37a:f29f95 /* = md5中无法查询的。*/
0 m' v: _& e- ^865a697fb9b4bd9c6737432aaff136bd:22dc87 /* = 304892415 */
15b7a21513f24ffe97d9f9830acf51ad:07626c /* = 123456 */
/* -a 使用穷举模式 -m HASH的类型是VB DISCUZ跟DV加密是一样，?d是代表数字 穷举10个数字 */ hashcat-cli64.exe -a 3 -m 2611 md5.txt ?d?d?d?d?d?d?d?d?d?d
Input.Mode: Mask (?d?d?d?d?d)
Index…..: 0/1 (segment), 100000 (words), 0 (bytes)
& o  E6 D) ^" K4 i. R( rRecovered.: 0/3 hashes, 0/3 salts
0 x6 L3 o) E* f2 k$ P% T4 y+ USpeed/sec.: – plains, – words
4 S1 _) [2 u: ?1 ?- pProgress..: 100000/100000 (100.00%)
Running…: –:–:–:–
8 L/ m- i# q. g( YEstimated.: –:–:–:–
" R8 x% G8 {: ?5 m" Q" C15b7a21513f24ffe97d9f9830acf51ad:07626c:123456
Input.Mode: Mask (?d?d?d?d?d?d)
Index…..: 0/1 (segment), 1000000 (words), 0 (bytes)
4 R8 L2 Z1 o  P% K% zRecovered.: 1/3 hashes, 1/3 salts
* n  G9 b' Z, T" J: c# ^0 [8 T0 n* rSpeed/sec.: 7.43M plains, 3.72M words
2 [" T+ \! H' G8 J8 K; m2 `. [Progress..: 1000000/1000000 (100.00%)
Running…: 00:00:00:01
8 I, _$ x3 S( E% r$ ^) ]  x+ ^Estimated.: –:–:–:–
Input.Mode: Mask (?d?d?d?d?d?d?d)
( ?  E* ^+ I% |" n9 p2 p1 }" }+ @& KIndex…..: 0/1 (segment), 10000000 (words), 0 (bytes)
0 _. u2 q" `* p3 S  l. zRecovered.: 1/3 hashes, 1/3 salts
2 t" }* Y! D9 Y& L. R8 @" `- ~! MSpeed/sec.: 13.67M plains, 6.83M words
: n4 _# F7 G0 o4 R9 HProgress..: 10000000/10000000 (100.00%)
& O# }6 v  t) j- o' ZRunning…: 00:00:00:01
Estimated.: –:–:–:–
Input.Mode: Mask (?d?d?d?d?d?d?d?d)
Index…..: 0/1 (segment), 100000000 (words), 0 (bytes)
  B2 k; L8 v; k- i0 MRecovered.: 1/3 hashes, 1/3 salts
Speed/sec.: 18.59M plains, 9.29M words
Progress..: 100000000/100000000 (100.00%)
' U. l4 n* q2 CRunning…: 00:00:00:11
Estimated.: –:–:–:–
8 W7 c' k: u: D" P9 X865a697fb9b4bd9c6737432aaff136bd:22dc87:304892415
可以看到破解 9位3开纯数字密码需要11秒。
Input.Mode: Mask (?d?d?d?d?d?d?d?d?d?d)
4 \. T3 I8 q$ ]: X( I! T( N; Z7 NIndex…..: 0/1 (segment), 10000000000 (words), 0 (bytes)
Recovered.: 2/3 hashes, 2/3 salts
6 Q( j/ y: V! o9 S3 r% YSpeed/sec.: 12.70M plains, 12.70M words
) R9 r8 Y' Z7 ^Progress..: 10000000000/10000000000 (100.00%)
Running…: 00:00:13:07
) f3 Q- Q$ a$ F9 c- @5 OEstimated.: –:–:–:–
而10个数字即需要13分钟，这样的速度如果有服务器是8核或更多，或者自己GPU强劲，会更加快，我测试只是用了一个入门级的CPU。
: j; B0 {2 \+ ~# K( g/ J在这里可以下载到一些字典，不过国人对这些字典貌似无视。
7 b8 `5 {, Y  S/ ~2 thttp://blog.g0tmi1k.com/2011/06/dictionaries-wordlists.html