爆破、破解Disduz x 2.5 md5(md5(pass)$salt)密码加密

admin

测试环境
5 o1 P! v7 T. k. l9 A# `5 zOS 名称: Microsoft® Windows Server® 2008 Enterprise
3 F; x# c' Z. I& @' mOS 版本: 6.0.6001 Service Pack 1 Build 6001
OS 制造商: Microsoft Corporation
OS 配置: 独立服务器
* d9 S2 V5 Y" x. \6 e3 h1 F% iOS 构件类型: Multiprocessor Free
注册的所有人: Windows 用户
系统型号: PowerEdge R620
+ }; v! V* L- x5 ?系统类型: x64-based PC
处理器: 安装了 1 个处理器。
: p5 u( a/ S* M& K5 F[01]: Intel64 Family 6 Model 45 Stepping 7 GenuineIntel ~2400
0 X9 p1 b' y% bcat md5.txt
3fb78e9bc0b297e3de4e77531766c37a:f29f95 /* = md5中无法查询的。*/
865a697fb9b4bd9c6737432aaff136bd:22dc87 /* = 304892415 */
: _+ U. ^9 A* t) F15b7a21513f24ffe97d9f9830acf51ad:07626c /* = 123456 */
/* -a 使用穷举模式 -m HASH的类型是VB DISCUZ跟DV加密是一样，?d是代表数字 穷举10个数字 */ hashcat-cli64.exe -a 3 -m 2611 md5.txt ?d?d?d?d?d?d?d?d?d?d
: \4 L1 ~: t( P! |$ b- @Input.Mode: Mask (?d?d?d?d?d)
Index…..: 0/1 (segment), 100000 (words), 0 (bytes)
9 b; ]% b# \6 l5 _- wRecovered.: 0/3 hashes, 0/3 salts
* M6 i/ `* \" q9 XSpeed/sec.: – plains, – words
Progress..: 100000/100000 (100.00%)
Running…: –:–:–:–
Estimated.: –:–:–:–
: i( y: m; A; G& S15b7a21513f24ffe97d9f9830acf51ad:07626c:123456
% E. f4 Q  J) {Input.Mode: Mask (?d?d?d?d?d?d)
Index…..: 0/1 (segment), 1000000 (words), 0 (bytes)
0 M( a: U9 g8 H$ B# e' P8 qRecovered.: 1/3 hashes, 1/3 salts
# B+ q$ d6 x7 m5 F$ X, ySpeed/sec.: 7.43M plains, 3.72M words
Progress..: 1000000/1000000 (100.00%)
Running…: 00:00:00:01
  H0 U- K! U/ V3 pEstimated.: –:–:–:–
7 n2 e" X' A  t3 H" TInput.Mode: Mask (?d?d?d?d?d?d?d)
, U1 }$ |, [. Y: N! e  GIndex…..: 0/1 (segment), 10000000 (words), 0 (bytes)
: S3 ^( W. |' g% G% V7 s/ }5 cRecovered.: 1/3 hashes, 1/3 salts
Speed/sec.: 13.67M plains, 6.83M words
$ p, M9 |* i; n" f4 [) P. tProgress..: 10000000/10000000 (100.00%)
Running…: 00:00:00:01
- `+ T7 @/ S4 ^5 G" q+ @: `7 pEstimated.: –:–:–:–
" L; t  e- m5 w, {. V5 lInput.Mode: Mask (?d?d?d?d?d?d?d?d)
* h$ ^$ S/ l/ Q8 u' J/ T  BIndex…..: 0/1 (segment), 100000000 (words), 0 (bytes)
: w& u; v' g/ Q6 C+ J  SRecovered.: 1/3 hashes, 1/3 salts
Speed/sec.: 18.59M plains, 9.29M words
Progress..: 100000000/100000000 (100.00%)
$ c! Z$ z8 g+ ~- hRunning…: 00:00:00:11
Estimated.: –:–:–:–
4 K! ]9 _) t# S8 p1 d865a697fb9b4bd9c6737432aaff136bd:22dc87:304892415
; p1 _* a' [$ `/ t* [可以看到破解 9位3开纯数字密码需要11秒。
Input.Mode: Mask (?d?d?d?d?d?d?d?d?d?d)
Index…..: 0/1 (segment), 10000000000 (words), 0 (bytes)
Recovered.: 2/3 hashes, 2/3 salts
6 _) r% D% V) qSpeed/sec.: 12.70M plains, 12.70M words
5 _! s9 `, n( F3 m5 XProgress..: 10000000000/10000000000 (100.00%)
$ N1 z; o  a4 CRunning…: 00:00:13:07
Estimated.: –:–:–:–
" L0 |1 u; P4 h& L! J  L而10个数字即需要13分钟，这样的速度如果有服务器是8核或更多，或者自己GPU强劲，会更加快，我测试只是用了一个入门级的CPU。
6 b6 d9 I+ h. k% X. \9 F+ P; ^  Q在这里可以下载到一些字典，不过国人对这些字典貌似无视。
( {4 z9 S* f% C' c2 M$ A' X4 qhttp://blog.g0tmi1k.com/2011/06/dictionaries-wordlists.html