A. 瀛樺偍鐢ㄦ埛瀵嗙爜鐨刴d5鍝堝笇鍊,涓鑸浣跨敤鐨勬暟鎹綾誨瀷鏄浠涔
瀛樺偍鐢ㄦ埛瀵嗙爜鐨凪D5鍝堝笇鍊礆紝涓鑸浣跨敤鐨勬暟鎹綾誨瀷鏄瀛楃︿覆銆
璇︾粏
MD5鏄涓縐嶅箍娉涗嬌鐢ㄧ殑瀵嗙爜鍝堝笇鍑芥暟錛屽畠鎺ュ彈浠繪剰闀垮害鐨勬暟鎹浣滀負杈撳叆錛屽苟鐢熸垚涓涓鍥哄畾闀垮害鐨勫嶮鍏榪涘埗鏁板瓧瀛楃︿覆浣滀負杈撳嚭銆傝繖涓杈撳嚭瀛楃︿覆鏄杈撳叆鏁版嵁鐨勬暟瀛楁憳瑕侊紝瀵硅緭鍏ユ暟鎹鐨勪換浣曞井灝忔敼鍔ㄩ兘浼氬艱嚧鐢熸垚鐨勫搱甯屽煎彂鐢熸樉钁楀彉鍖栥
鐢變簬MD5鍝堝笇鍊肩殑琛ㄧず褰㈠紡鏄32涓瀛楃︾殑鍗佸叚榪涘埗鏁板瓧瀛楃︿覆錛屽洜姝ゅ湪鏁版嵁搴撲腑瀛樺偍榪欎簺鍊兼椂錛屾渶鍚堥傜殑鏁版嵁綾誨瀷鏄瀛楃︿覆綾誨瀷銆傚湪鍏崇郴鍨嬫暟鎹搴撲腑錛屽侻ySQL錛岃繖閫氬父鎰忓懗鐫浣跨敤VARCHAR鎴朇HAR鏁版嵁綾誨瀷銆俈ARCHAR綾誨瀷鐢ㄤ簬瀛樺偍鍙鍙橀暱搴︾殑瀛楃︿覆錛岃孋HAR綾誨瀷鐢ㄤ簬瀛樺偍鍥哄畾闀垮害鐨勫瓧絎︿覆銆傚湪榪欑嶆儏鍐典笅錛岀敱浜嶮D5鍝堝笇鍊兼繪槸32涓瀛楃﹂暱錛屾墍浠CHAR鍙鑳芥槸涓涓鏇村悎閫傜殑閫夋嫨錛屽洜涓哄畠浼氶勫垎閰嶅滻瀹氶暱搴︾殑瀛樺偍絀洪棿錛屼粠鑰屽彲鑳芥彁楂樻煡璇㈡ц兘銆
涓句釜渚嬪瓙錛屽傛灉浣犲湪MySQL鏁版嵁搴撲腑鍒涘緩涓涓鐢ㄦ埛琛ㄦ潵瀛樺偍鐢ㄦ埛鍚嶅拰瀵嗙爜鐨凪D5鍝堝笇鍊礆紝浣犲彲鑳戒細榪欐牱瀹氫箟琛ㄧ粨鏋勶細
sql
CREATE TABLE users NOT NULL,
password_hash CHAR NOT NULL
);
鍦ㄨ繖涓渚嬪瓙涓錛宍password_hash`鍒椾嬌鐢ㄤ簡CHAR鏁版嵁綾誨瀷鏉ュ瓨鍌∕D5鍝堝笇鍊箋傚綋鐢ㄦ埛娉ㄥ唽鎴栨洿鏂板瘑鐮佹椂錛屼綘浼氳＄畻瀵嗙爜鐨凪D5鍝堝笇鍊礆紝騫跺皢鍏跺瓨鍌ㄥ湪`password_hash`鍒椾腑銆
闇瑕佹敞鎰忕殑鏄錛屽敖綆MD5綆楁硶鍦ㄨ繃鍘昏騫挎硾浣跨敤錛屼絾鐜板湪宸蹭笉琚鎺ㄨ崘鐢ㄤ簬瀵嗙爜瀛樺偍錛屽洜涓哄畠瀛樺湪涓浜涘凡鐭ョ殑瀹夊叏婕忔礊銆傜幇浠ｅ簲鐢ㄧ▼搴忔洿鍊懼悜浜庝嬌鐢ㄦ洿瀹夊叏鐨勫搱甯岀畻娉曪紝濡俠crypt鎴朅rgon2錛岃繖浜涚畻娉曟彁渚涗簡鏇村己鐨勫畨鍏ㄦэ紝鐗瑰埆鏄閽堝瑰僵鉶硅〃絳夋敾鍑繪墜孌點傜劧鑰岋紝濡傛灉浣犳ｅ湪澶勭悊涓涓閬楃暀緋葷粺鎴栧嚭浜庢煇縐嶅師鍥犲繀欏諱嬌鐢∕D5錛岄偅涔堜嬌鐢ㄤ笂榪版柟娉曞瓨鍌ㄥ搱甯屽兼槸鍚堥傜殑銆
B. 騫茶揣 | 涓栫晫涓婃渶蹇鏈楂樼駭鐨勫瘑鐮佺牬瑙ｅ伐鍏稨ashcat鍏ラ棬鎸囧崡
鎺㈢儲鏈灝栫鐨勫瘑鐮佽В瀵嗘妧鏈錛孒ashcat鍏ラ棬鍏ㄨВ鏋
Hashcat錛岃瑾変負瀵嗙爜鐮磋В鐣岀殑瓚呯駭宸ㄦ槦錛屽嚟鍊熷叾瓚呭嚒鐨勯熷害鍜屽己澶х殑鍔熻兘錛屾垚涓虹牬瑙LM鍝堝笇銆丮D5銆丼HA絳夊瘑鐮佺被鍨嬬殑棣栭夊伐鍏楓傛棤璁轟綘鏄疞inux銆丮ac榪樻槸Windows鐨勭敤鎴鳳紝閮借兘鍦ㄨ繖嬈捐法騫沖彴鐨勭炲櫒涓鎵懼埌浣犵殑鐮磋В涔嬮亾銆傚畠紼垮潶鐨勫畼鏂圭綉絝欏拰GitHub浠撳簱鍒嗗埆鏄錛
瀹樻柟緗戠珯錛 https://hashcat.net
GitHub欏圭洰錛 https://github.com/hashcat/hashcat
璁╂垜浠娣卞叆浜嗚В鍑犱釜鍏抽敭鍛戒護錛岃╀綘蹇閫熶笂鎵嬶細
浣跨敤濡備笅鐨勯夐」瀹氬埗浣犵殑鐮磋В絳栫暐錛
鐮磋В榪囩▼閿絝栨愪腑錛岄傛椂鎸塻閿鏌ョ湅榪涘害錛宲閿鏆傚仠錛宺閿鎮㈠嶏紝q閿閫鍑猴紝鐏墊椿搴斿圭牬瑙ｈ繘搴︺
Hashcat鐨勫▉鍔涘湪浜庡畠鐨勭伒媧繪у拰鏁堢巼錛屾帉鎻¤繖浜涘熀紜鍛戒護鍜屾ā寮忥紝浣犲皢鑳芥洿楂樻晥鍦版帰緔㈠瘑鐮佷笘鐣屻傜珛鍗充笅杞藉苟寮濮嬩綘鐨勭牬瑙ｄ箣鏃呭惂錛岃В閿侀殣鈃忓湪緗戠粶瑙掕惤鐨勫瘑鐮佺樺瘑銆