中国网络渗透测试联盟

标题: 爆破、破解Disduz x 2.5 md5(md5(pass)$salt)密码加密 [打印本页]
作者: admin    时间: 2013-2-14 00:03
标题: 爆破、破解Disduz x 2.5 md5(md5(pass)$salt)密码加密
测试环境2 r8 j0 Z& ]& ~0 y
OS 名称: Microsoft® Windows Server® 2008 Enterprise. I$ a! c" F1 D+ N# u/ Q2 u
OS 版本: 6.0.6001 Service Pack 1 Build 6001
1 j# L* Y3 T8 D7 hOS 制造商: Microsoft Corporation
( i  A2 q& W/ R5 VOS 配置: 独立服务器
8 t! g0 h8 ~  M$ ^6 AOS 构件类型: Multiprocessor Free: n- j. j' E/ D
注册的所有人: Windows 用户
8 I: B. a$ y* G! Q& D' U$ o1 ?2 M系统型号: PowerEdge R620
* A" {" o% C0 W! i系统类型: x64-based PC% t* K6 w0 @2 X
处理器: 安装了 1 个处理器。
( s- R; X% F5 Z" s[01]: Intel64 Family 6 Model 45 Stepping 7 GenuineIntel ~2400! `) a! r- B# ^; }  Y
cat md5.txt+ v/ H9 g$ }9 c! Q
3fb78e9bc0b297e3de4e77531766c37a:f29f95 /* = md5中无法查询的。*/$ T" L  K% o- L
865a697fb9b4bd9c6737432aaff136bd:22dc87 /* = 304892415 */
9 T4 t: f8 @! m15b7a21513f24ffe97d9f9830acf51ad:07626c /* = 123456 */
  w! f" U# k& y0 N* e /* -a 使用穷举模式 -m HASH的类型是VB DISCUZ跟DV加密是一样，?d是代表数字 穷举10个数字 */ hashcat-cli64.exe -a 3 -m 2611 md5.txt ?d?d?d?d?d?d?d?d?d?d
: `9 m9 j2 }( hInput.Mode: Mask (?d?d?d?d?d)
- g! P9 y( C" _4 n- E- VIndex…..: 0/1 (segment), 100000 (words), 0 (bytes)
0 x4 M+ T' `8 w# c0 PRecovered.: 0/3 hashes, 0/3 salts3 ^  v0 ]) b; ^8 |6 a! [
Speed/sec.: – plains, – words. J0 i/ B9 b, R0 k7 u
Progress..: 100000/100000 (100.00%)
" {! u( h' k8 z4 m8 tRunning…: –:–:–:–
: |2 w; F- X( B8 i  n* AEstimated.: –:–:–:–  f9 U# S0 r6 j+ `1 a
15b7a21513f24ffe97d9f9830acf51ad:07626c:123456
2 ~$ G2 g8 v. v) c% FInput.Mode: Mask (?d?d?d?d?d?d)
' I, N. l; h* A& ]( HIndex…..: 0/1 (segment), 1000000 (words), 0 (bytes)' M6 h. y% s7 h6 y3 y# ^( ?
Recovered.: 1/3 hashes, 1/3 salts' r$ k8 C4 j( ~- R5 K2 |# [
Speed/sec.: 7.43M plains, 3.72M words
. r: t! b4 u- H$ V* x4 hProgress..: 1000000/1000000 (100.00%)9 y& c3 T: z- d; ?+ O2 M' j. d: p' |
Running…: 00:00:00:01
4 H5 w5 u- y' S" S: wEstimated.: –:–:–:–
! ?; d8 Y2 k. {* N/ wInput.Mode: Mask (?d?d?d?d?d?d?d)7 \8 ?6 T) _) G! M$ ^
Index…..: 0/1 (segment), 10000000 (words), 0 (bytes)
, u0 Z1 d" `! O  SRecovered.: 1/3 hashes, 1/3 salts  A6 ~1 c. d3 W+ U+ R6 z0 R% @( \9 W
Speed/sec.: 13.67M plains, 6.83M words, U8 z2 w/ c, B- p: G
Progress..: 10000000/10000000 (100.00%)1 |0 U+ e" s7 R5 W9 X; M# W
Running…: 00:00:00:01
7 ~" k1 s2 G3 pEstimated.: –:–:–:–% l' s( O/ N7 F# M3 D! O
Input.Mode: Mask (?d?d?d?d?d?d?d?d)
3 k5 q7 E7 q) E* N. wIndex…..: 0/1 (segment), 100000000 (words), 0 (bytes)
2 b- q" b7 P0 Q) zRecovered.: 1/3 hashes, 1/3 salts
$ i7 \  N2 y* r/ v5 ASpeed/sec.: 18.59M plains, 9.29M words
( x9 S$ v! J: N) Y, CProgress..: 100000000/100000000 (100.00%)
: h/ D) m8 o$ A/ L3 p5 Q% V7 tRunning…: 00:00:00:11
4 j0 ]( }# x! i2 M( M! x" V+ vEstimated.: –:–:–:–: C" P8 z; g  f3 t* ]6 o% n9 h
865a697fb9b4bd9c6737432aaff136bd:22dc87:304892415; E0 ?' W) X9 T  G) V
可以看到破解 9位3开纯数字密码需要11秒。/ |  H  O8 z( H
Input.Mode: Mask (?d?d?d?d?d?d?d?d?d?d)6 e; z% ~- Y8 G9 Y' u7 t: L
Index…..: 0/1 (segment), 10000000000 (words), 0 (bytes)
% X- P4 W, @4 z* Y) \* PRecovered.: 2/3 hashes, 2/3 salts9 Z/ W% @. w3 C* E! C) d4 I
Speed/sec.: 12.70M plains, 12.70M words6 j) o. U; ?/ M. H4 z
Progress..: 10000000000/10000000000 (100.00%)% @6 s/ K5 F: l. a2 U6 C
Running…: 00:00:13:07  [% ^; A$ s7 p$ v/ _% f/ y
Estimated.: –:–:–:–
- Y, y* R9 e2 v. o( L; F3 }' o而10个数字即需要13分钟，这样的速度如果有服务器是8核或更多，或者自己GPU强劲，会更加快，我测试只是用了一个入门级的CPU。( S; V* z$ a; k4 ~- P# P
在这里可以下载到一些字典，不过国人对这些字典貌似无视。
% Y; l/ P7 V8 e  }4 R0 Z8 j/ hhttp://blog.g0tmi1k.com/2011/06/dictionaries-wordlists.html



欢迎光临 中国网络渗透测试联盟 (https://www.cobjon.com/) Powered by Discuz! X3.2