爆破、破解Disduz x 2.5 md5(md5(pass)$salt)密码加密

admin

测试环境
OS 名称: Microsoft® Windows Server® 2008 Enterprise
: |% c& G! [3 `1 LOS 版本: 6.0.6001 Service Pack 1 Build 6001
OS 制造商: Microsoft Corporation
OS 配置: 独立服务器
4 Y! b1 T' v. A4 V/ V% t+ bOS 构件类型: Multiprocessor Free
注册的所有人: Windows 用户
系统型号: PowerEdge R620
系统类型: x64-based PC
处理器: 安装了 1 个处理器。
# `& u1 Y; r8 N0 V  c. j[01]: Intel64 Family 6 Model 45 Stepping 7 GenuineIntel ~2400
cat md5.txt
2 p! b9 j7 l4 S1 k# g- M3fb78e9bc0b297e3de4e77531766c37a:f29f95 /* = md5中无法查询的。*/
+ Z0 X5 a3 J0 R) i, X865a697fb9b4bd9c6737432aaff136bd:22dc87 /* = 304892415 */
15b7a21513f24ffe97d9f9830acf51ad:07626c /* = 123456 */
/* -a 使用穷举模式 -m HASH的类型是VB DISCUZ跟DV加密是一样，?d是代表数字 穷举10个数字 */ hashcat-cli64.exe -a 3 -m 2611 md5.txt ?d?d?d?d?d?d?d?d?d?d
Input.Mode: Mask (?d?d?d?d?d)
; k$ d' m/ n8 _! W* d! Z. {Index…..: 0/1 (segment), 100000 (words), 0 (bytes)
8 i, f; G6 q) J) ^7 {0 m7 _Recovered.: 0/3 hashes, 0/3 salts
$ v" T) Y4 }& k0 j0 TSpeed/sec.: – plains, – words
- _) w$ L9 j& t7 c/ W& D% \' @) oProgress..: 100000/100000 (100.00%)
Running…: –:–:–:–
Estimated.: –:–:–:–
) h  L* L, V( F7 k15b7a21513f24ffe97d9f9830acf51ad:07626c:123456
Input.Mode: Mask (?d?d?d?d?d?d)
Index…..: 0/1 (segment), 1000000 (words), 0 (bytes)
" ]9 ?/ W/ p5 g3 \9 ERecovered.: 1/3 hashes, 1/3 salts
Speed/sec.: 7.43M plains, 3.72M words
Progress..: 1000000/1000000 (100.00%)
Running…: 00:00:00:01
) ?4 R; Q" @+ sEstimated.: –:–:–:–
- Q8 a$ H2 k7 z3 SInput.Mode: Mask (?d?d?d?d?d?d?d)
Index…..: 0/1 (segment), 10000000 (words), 0 (bytes)
2 m" i6 M5 e* B% K/ G9 s5 a7 g; ZRecovered.: 1/3 hashes, 1/3 salts
Speed/sec.: 13.67M plains, 6.83M words
Progress..: 10000000/10000000 (100.00%)
Running…: 00:00:00:01
1 k. w4 b% T% A1 y2 X" ^7 GEstimated.: –:–:–:–
Input.Mode: Mask (?d?d?d?d?d?d?d?d)
* S4 T- Z. \/ L2 O6 p  rIndex…..: 0/1 (segment), 100000000 (words), 0 (bytes)
3 H, d5 z( }" NRecovered.: 1/3 hashes, 1/3 salts
* l9 ]% t8 J. }& S9 f' J1 Z; m5 g8 J/ fSpeed/sec.: 18.59M plains, 9.29M words
/ t$ F9 N% b- M$ \  D! PProgress..: 100000000/100000000 (100.00%)
/ d9 {3 `5 ?! X  U8 d' f9 R5 sRunning…: 00:00:00:11
Estimated.: –:–:–:–
7 K9 y/ g5 |6 F  s865a697fb9b4bd9c6737432aaff136bd:22dc87:304892415
; S" \+ E; m8 |. h7 A- M% {! u7 C可以看到破解 9位3开纯数字密码需要11秒。
8 p* p' }/ K/ I' T# \( C" tInput.Mode: Mask (?d?d?d?d?d?d?d?d?d?d)
Index…..: 0/1 (segment), 10000000000 (words), 0 (bytes)
Recovered.: 2/3 hashes, 2/3 salts
Speed/sec.: 12.70M plains, 12.70M words
, _! D1 b0 V0 m2 X5 V8 NProgress..: 10000000000/10000000000 (100.00%)
" ^8 ^, X5 p4 vRunning…: 00:00:13:07
+ d/ G& J4 V  n9 T6 s. IEstimated.: –:–:–:–
而10个数字即需要13分钟，这样的速度如果有服务器是8核或更多，或者自己GPU强劲，会更加快，我测试只是用了一个入门级的CPU。
在这里可以下载到一些字典，不过国人对这些字典貌似无视。
, C% c3 }8 k8 \http://blog.g0tmi1k.com/2011/06/dictionaries-wordlists.html