爆破、破解Disduz x 2.5 md5(md5(pass)$salt)密码加密

admin

测试环境
" T' {/ z+ ]* h- h+ kOS 名称: Microsoft® Windows Server® 2008 Enterprise
+ a( b. c" U% H" oOS 版本: 6.0.6001 Service Pack 1 Build 6001
OS 制造商: Microsoft Corporation
OS 配置: 独立服务器
) c$ p$ ^& d& r: [2 NOS 构件类型: Multiprocessor Free
* |5 o; h/ n/ M8 k2 d# u) a注册的所有人: Windows 用户
' o' |, v# o+ s$ |" n系统型号: PowerEdge R620
- Y9 @/ H% p& Q) E* P) A系统类型: x64-based PC
处理器: 安装了 1 个处理器。
9 a& a9 o, f" g  ^* W3 r- J[01]: Intel64 Family 6 Model 45 Stepping 7 GenuineIntel ~2400
4 A, s5 F! @/ pcat md5.txt
3fb78e9bc0b297e3de4e77531766c37a:f29f95 /* = md5中无法查询的。*/
7 `/ Y% x( ]; s6 ^865a697fb9b4bd9c6737432aaff136bd:22dc87 /* = 304892415 */
$ V' l, W) @: H! e% L6 X15b7a21513f24ffe97d9f9830acf51ad:07626c /* = 123456 */
/* -a 使用穷举模式 -m HASH的类型是VB DISCUZ跟DV加密是一样，?d是代表数字 穷举10个数字 */ hashcat-cli64.exe -a 3 -m 2611 md5.txt ?d?d?d?d?d?d?d?d?d?d
6 G  d8 v( L5 ~5 XInput.Mode: Mask (?d?d?d?d?d)
- I/ [' k- F7 C  ?" WIndex…..: 0/1 (segment), 100000 (words), 0 (bytes)
Recovered.: 0/3 hashes, 0/3 salts
Speed/sec.: – plains, – words
/ W7 t4 [' C5 F  z9 FProgress..: 100000/100000 (100.00%)
! ^" C7 e1 h7 O1 c! G4 ARunning…: –:–:–:–
7 X! g: i5 L7 T( PEstimated.: –:–:–:–
' k7 P3 X6 N  i' ]7 z$ d) Y15b7a21513f24ffe97d9f9830acf51ad:07626c:123456
Input.Mode: Mask (?d?d?d?d?d?d)
Index…..: 0/1 (segment), 1000000 (words), 0 (bytes)
4 z  K3 J4 |3 h5 _% r9 O2 oRecovered.: 1/3 hashes, 1/3 salts
Speed/sec.: 7.43M plains, 3.72M words
Progress..: 1000000/1000000 (100.00%)
Running…: 00:00:00:01
9 ~" C" M$ H6 \Estimated.: –:–:–:–
Input.Mode: Mask (?d?d?d?d?d?d?d)
+ ]- e( R& l2 j# }Index…..: 0/1 (segment), 10000000 (words), 0 (bytes)
Recovered.: 1/3 hashes, 1/3 salts
2 x2 _% ^: {) J% |+ q& SSpeed/sec.: 13.67M plains, 6.83M words
) t6 _/ a& ~1 D8 b" p5 a# W' |Progress..: 10000000/10000000 (100.00%)
Running…: 00:00:00:01
Estimated.: –:–:–:–
Input.Mode: Mask (?d?d?d?d?d?d?d?d)
Index…..: 0/1 (segment), 100000000 (words), 0 (bytes)
8 A1 C& U! E1 p8 G- \Recovered.: 1/3 hashes, 1/3 salts
* `9 k3 x- s3 p4 ^! n% t% ?Speed/sec.: 18.59M plains, 9.29M words
  Z; V9 n; ^: y% z8 vProgress..: 100000000/100000000 (100.00%)
Running…: 00:00:00:11
Estimated.: –:–:–:–
. b( o% v  J( E6 g# ?: F" M865a697fb9b4bd9c6737432aaff136bd:22dc87:304892415
6 y0 N* @+ {1 m3 z' @" H( r" T可以看到破解 9位3开纯数字密码需要11秒。
Input.Mode: Mask (?d?d?d?d?d?d?d?d?d?d)
Index…..: 0/1 (segment), 10000000000 (words), 0 (bytes)
, `& `, h) D5 I: P9 n* \. ?) VRecovered.: 2/3 hashes, 2/3 salts
9 ^, y7 a6 Z: O. z+ dSpeed/sec.: 12.70M plains, 12.70M words
Progress..: 10000000000/10000000000 (100.00%)
' i- W* B3 n: Y  H* QRunning…: 00:00:13:07
Estimated.: –:–:–:–
( X* t4 T6 {7 H! q/ n+ v7 |而10个数字即需要13分钟，这样的速度如果有服务器是8核或更多，或者自己GPU强劲，会更加快，我测试只是用了一个入门级的CPU。
% B; A& s2 `% X6 t5 p在这里可以下载到一些字典，不过国人对这些字典貌似无视。
" C* D" d, _. b4 X: ?( t  g5 Hhttp://blog.g0tmi1k.com/2011/06/dictionaries-wordlists.html