找回密码
 立即注册
欢迎中测联盟老会员回家,1997年注册的域名
查看: 2599|回复: 0
打印 上一主题 下一主题

爆破、破解Disduz x 2.5 md5(md5(pass)$salt)密码加密

[复制链接]
跳转到指定楼层
楼主
发表于 2013-2-14 00:03:14 | 只看该作者 回帖奖励 |倒序浏览 |阅读模式
测试环境: S' H, H- d7 g1 T4 h# V* J/ Z6 o
OS 名称: Microsoft® Windows Server® 2008 Enterprise
! z% M/ `& I! ~3 E7 b) J$ P" o: sOS 版本: 6.0.6001 Service Pack 1 Build 6001( F8 D/ V5 M7 _- R* R+ {% H  O
OS 制造商: Microsoft Corporation8 }7 N( X/ g4 f2 z* ?
OS 配置: 独立服务器
$ X& i0 X  t7 [2 YOS 构件类型: Multiprocessor Free7 |, L# @5 h7 Q* V% |5 K
注册的所有人: Windows 用户
3 r0 Q9 |5 f& y# \  Z  f: i* R) o系统型号: PowerEdge R620
) H( d4 j, N1 z- A* ]系统类型: x64-based PC
" c: k: s* x9 P, s( i6 c" c处理器: 安装了 1 个处理器。
1 o  K6 K0 [/ W  X- |[01]: Intel64 Family 6 Model 45 Stepping 7 GenuineIntel ~2400
8 x2 b2 c) f, _+ M# l' c' ?cat md5.txt, q8 N+ A: k( H3 |" a
3fb78e9bc0b297e3de4e77531766c37a:f29f95 /* = md5中无法查询的。*/
& A9 S) {# g# ]8 k  d/ e# K865a697fb9b4bd9c6737432aaff136bd:22dc87 /* = 304892415 */
0 O7 p. z# ?$ x5 h" e6 T5 @15b7a21513f24ffe97d9f9830acf51ad:07626c /* = 123456 */
/ [- l* s; A2 `, C' l5 C- h% r4 K6 } /* -a 使用穷举模式 -m HASH的类型是VB DISCUZ跟DV加密是一样,?d是代表数字 穷举10个数字 */ hashcat-cli64.exe -a 3 -m 2611 md5.txt ?d?d?d?d?d?d?d?d?d?d/ S1 ^5 g- b$ m( Q; a2 J$ o0 b
Input.Mode: Mask (?d?d?d?d?d). a3 r7 s9 d7 J: x: h6 X. L' x
Index…..: 0/1 (segment), 100000 (words), 0 (bytes)
5 F" u& H( ]( K6 wRecovered.: 0/3 hashes, 0/3 salts- G5 m" ~$ A6 s$ K* m" v
Speed/sec.: – plains, – words0 J5 N' M3 w. ]
Progress..: 100000/100000 (100.00%)
- v4 q- W: O* v* G8 q" U, ^Running…: –:–:–:–
0 K$ J2 d; J3 C* D7 F6 I& nEstimated.: –:–:–:–: F4 Q' _" z4 R
15b7a21513f24ffe97d9f9830acf51ad:07626c:123456
: U' ^- n0 H+ ^( s( U' T" ~Input.Mode: Mask (?d?d?d?d?d?d)% Z3 |+ K# k# \3 Q2 N& N6 o
Index…..: 0/1 (segment), 1000000 (words), 0 (bytes)
% _5 ?, E( b5 f& D7 V- P3 lRecovered.: 1/3 hashes, 1/3 salts/ A6 ]# K5 T- e
Speed/sec.: 7.43M plains, 3.72M words
, d, j$ F. j0 H$ U+ I. }( qProgress..: 1000000/1000000 (100.00%)
2 Z* C7 C/ B) r* @/ \! _1 m5 K+ }Running…: 00:00:00:01
* G+ M" i7 }) o, tEstimated.: –:–:–:–# @, K( Q; [' P/ Y; d" q
Input.Mode: Mask (?d?d?d?d?d?d?d)5 ^- S& @0 @; G9 v: f
Index…..: 0/1 (segment), 10000000 (words), 0 (bytes)1 r) H! D0 y" }
Recovered.: 1/3 hashes, 1/3 salts
' B* W" b9 D" |3 B$ F! s; _+ RSpeed/sec.: 13.67M plains, 6.83M words
3 C( f/ ^9 p5 C* H) p& V8 UProgress..: 10000000/10000000 (100.00%): p2 h3 x8 N4 I
Running…: 00:00:00:01
; X  E% E2 J" jEstimated.: –:–:–:–4 I7 S0 T8 w+ F2 X3 p! }
Input.Mode: Mask (?d?d?d?d?d?d?d?d)
/ {) T8 d9 X* l7 x: |3 hIndex…..: 0/1 (segment), 100000000 (words), 0 (bytes)3 V) Q, E" K! [. n
Recovered.: 1/3 hashes, 1/3 salts8 _2 f- k# L* u: M6 o# R. X
Speed/sec.: 18.59M plains, 9.29M words% O5 D& K/ T; q8 e( _
Progress..: 100000000/100000000 (100.00%)
6 q- q) L2 ]- c* m3 R0 fRunning…: 00:00:00:11
/ T# X: f! `. TEstimated.: –:–:–:–
. z7 O* n+ d- [: ~865a697fb9b4bd9c6737432aaff136bd:22dc87:304892415
. v; Y; S6 O. _0 t) i: t可以看到破解 9位3开纯数字密码需要11秒。
1 C' v7 `' z* `  a2 {2 R' @' t& dInput.Mode: Mask (?d?d?d?d?d?d?d?d?d?d)
2 o( b/ t6 G" f' o% d9 C- m" Z2 v# ZIndex…..: 0/1 (segment), 10000000000 (words), 0 (bytes)/ ~1 e  Q8 D$ i. V
Recovered.: 2/3 hashes, 2/3 salts
, T- p3 [; W+ ^5 i; F/ W6 YSpeed/sec.: 12.70M plains, 12.70M words) q" [; r: O% m' D' a
Progress..: 10000000000/10000000000 (100.00%)* @% ^8 s9 i3 V, w1 T8 U
Running…: 00:00:13:07" `2 \/ d$ l2 B2 D+ y
Estimated.: –:–:–:–6 Z9 W7 k% q- k9 `; b
而10个数字即需要13分钟,这样的速度如果有服务器是8核或更多,或者自己GPU强劲,会更加快,我测试只是用了一个入门级的CPU。& M# N$ ~0 m" ~: g
在这里可以下载到一些字典,不过国人对这些字典貌似无视。
. M) N+ m* o2 a8 o( chttp://blog.g0tmi1k.com/2011/06/dictionaries-wordlists.html
回复

使用道具 举报

您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

快速回复 返回顶部 返回列表