中国网络渗透测试联盟
标题:
爆破、破解Disduz x 2.5 md5(md5(pass)$salt)密码加密
[打印本页]
作者:
admin
时间:
2013-2-14 00:03
标题:
爆破、破解Disduz x 2.5 md5(md5(pass)$salt)密码加密
测试环境
" O e- X# \7 j6 ?
OS 名称: Microsoft® Windows Server® 2008 Enterprise
; ^1 w# n2 z2 R
OS 版本: 6.0.6001 Service Pack 1 Build 6001
. o5 \9 a/ H+ ?4 N" E+ k
OS 制造商: Microsoft Corporation
2 d/ s3 z$ X( u2 G- u# _
OS 配置: 独立服务器
# z+ I- R, W. z$ _$ J8 _
OS 构件类型: Multiprocessor Free
4 H7 L0 W- `% i
注册的所有人: Windows 用户
7 Q) `: d7 P( R4 P
系统型号: PowerEdge R620
% h$ z; |$ p4 w
系统类型: x64-based PC
/ t% u4 t# b4 H) \
处理器: 安装了 1 个处理器。
9 w9 o9 y( u1 C
[01]: Intel64 Family 6 Model 45 Stepping 7 GenuineIntel ~2400
. V p$ l. ?) K2 ?3 d' t
cat md5.txt
9 V; v8 `2 Z; Q1 t* v1 ~& e. a
3fb78e9bc0b297e3de4e77531766c37a:f29f95 /* = md5中无法查询的。*/
& o! M" {" ?: W5 s& X
865a697fb9b4bd9c6737432aaff136bd:22dc87 /* = 304892415 */
( s% o) }6 W8 L6 C8 c
15b7a21513f24ffe97d9f9830acf51ad:07626c /* = 123456 */
' j! _7 E8 z$ b
/* -a 使用穷举模式 -m HASH的类型是VB DISCUZ跟DV加密是一样，?d是代表数字 穷举10个数字 */ hashcat-cli64.exe -a 3 -m 2611 md5.txt ?d?d?d?d?d?d?d?d?d?d
2 n0 p1 }0 |( L! d" s% f" f
Input.Mode: Mask (?d?d?d?d?d)
' O8 V( d% `9 N- S S1 j% `2 D
Index…..: 0/1 (segment), 100000 (words), 0 (bytes)
+ D( w* o. l; j% Z
Recovered.: 0/3 hashes, 0/3 salts
2 l2 _8 U1 t, @5 {
Speed/sec.: – plains, – words
5 @3 j) ]7 `4 T \$ D( B
Progress..: 100000/100000 (100.00%)
+ G" U1 i( a, p, [
Running…: –:–:–:–
5 q9 a1 W6 C7 C" ^& @
Estimated.: –:–:–:–
9 c4 Y0 A* Q1 d7 I, T
15b7a21513f24ffe97d9f9830acf51ad:07626c:123456
( i" q+ a' U" h) N1 P' K( ]5 h
Input.Mode: Mask (?d?d?d?d?d?d)
6 J( L' e0 q$ [* r9 v
Index…..: 0/1 (segment), 1000000 (words), 0 (bytes)
$ |& ~' ~+ T' {* |% U0 [# ~3 ]9 g
Recovered.: 1/3 hashes, 1/3 salts
2 w& J; S( C1 ~4 w! W
Speed/sec.: 7.43M plains, 3.72M words
" G7 V& e, R( N
Progress..: 1000000/1000000 (100.00%)
7 }+ v- e O& c
Running…: 00:00:00:01
" d, h, i% O' N
Estimated.: –:–:–:–
9 r j; e) L$ p: M; O. q- w
Input.Mode: Mask (?d?d?d?d?d?d?d)
! V7 C2 m" M. h8 ]+ e% T
Index…..: 0/1 (segment), 10000000 (words), 0 (bytes)
- D% E0 d9 V+ V4 x) s7 `: u, W
Recovered.: 1/3 hashes, 1/3 salts
9 x; n/ P- B: Z9 {$ M4 t! H U
Speed/sec.: 13.67M plains, 6.83M words
" H4 h3 W/ P8 }0 {8 b8 W& d
Progress..: 10000000/10000000 (100.00%)
' {9 G/ U: \* _( k
Running…: 00:00:00:01
+ a( _, {4 @$ J* e: J# k L6 \- q
Estimated.: –:–:–:–
5 a4 s% F# l) z2 B) Q1 t
Input.Mode: Mask (?d?d?d?d?d?d?d?d)
D4 D# U" Z0 Z
Index…..: 0/1 (segment), 100000000 (words), 0 (bytes)
+ P9 Y1 g4 x& A* K, M
Recovered.: 1/3 hashes, 1/3 salts
- V$ ]0 b2 c: T/ k
Speed/sec.: 18.59M plains, 9.29M words
) H5 z- `3 W0 M4 F
Progress..: 100000000/100000000 (100.00%)
( G% a/ \' W) t9 X4 i
Running…: 00:00:00:11
7 g( \% U, D4 P, s8 B# X
Estimated.: –:–:–:–
0 ]& B5 p/ f! d
865a697fb9b4bd9c6737432aaff136bd:22dc87:304892415
" {6 m2 U" r/ y7 C
可以看到破解 9位3开纯数字密码需要11秒。
0 Z# E8 o" m# \
Input.Mode: Mask (?d?d?d?d?d?d?d?d?d?d)
% K5 _' W8 c$ K2 j; ]
Index…..: 0/1 (segment), 10000000000 (words), 0 (bytes)
: w! I7 }4 l- H& L
Recovered.: 2/3 hashes, 2/3 salts
% q6 H3 @# o* u% Q ]1 p
Speed/sec.: 12.70M plains, 12.70M words
4 r4 o0 x/ K/ W$ a( e3 p0 L
Progress..: 10000000000/10000000000 (100.00%)
& T- o: V3 v% j* a
Running…: 00:00:13:07
3 w: O! g$ {( o4 b! Y, a9 n3 Q
Estimated.: –:–:–:–
) q S: G7 L0 I, F5 d4 w2 Z* Q
而10个数字即需要13分钟，这样的速度如果有服务器是8核或更多，或者自己GPU强劲，会更加快，我测试只是用了一个入门级的CPU。
) c0 ~) [4 ~ C. o5 `0 n L' R4 }& p
在这里可以下载到一些字典，不过国人对这些字典貌似无视。
' \$ a- c0 B8 F
http://blog.g0tmi1k.com/2011/06/dictionaries-wordlists.html
欢迎光临 中国网络渗透测试联盟 (https://www.cobjon.com/)
Powered by Discuz! X3.2