DXPX

源码 Untitled.png 扫描 Untitled 1.png /* Navicat MySQL Data Transfer Source Server : demo Source Server Version : 50553 Source Host : localhost:3306 Source Database : hackimweb400 Target Server Type : MYSQL Target Server Version : 50553 File Encoding : 65001 Date: 2018-09-01 13:24:32 */ SET FOREIGN_KEY_CHECKS=0; -- ---------------------------- -- Table structure for `users` -- ---------------------------- DROP TABLE IF EXISTS `users`; CREATE TABLE `users` ( `id` int(11) NOT NULL AUTO_INCREMENT, `username` varchar(200) NOT NULL, `password_bcrypt` varchar(80) NOT NULL, `fname` varchar(30) NOT NULL, `description` varchar(200) NOT NULL, PRIMARY KEY (`id`) ) ENGINE=InnoDB AUTO_INCREMENT=66 DEFAULT CHARSET=latin1; -- ---------------------------- -- Records of users -- ---------------------------- INSERT INTO `users` VALUES ('1', 'harry', '$2y$10$FalJ8SmqTDBv7Fr366RC9uW5hKJVZijsDqzgASh1kSGMsUFMMLGZq', 'hackim', 'Hash cracking is futile!'); 有用户名加hash 生成字典 v="1234567890qwertyuiopasdfghjklzxcvbnm" p="kztu6fe1m68mwf7vl1g3grjzmocia043pmno83q3ati98c8r324dzc0hc7n41p6tdjg6p" def dicc(n,s): for i in v: print(s+i) \#末尾加 print(i+s) \#头部加 if n>0: dicc(n-1,s+i) dicc(n-1,i+s) dicc(2,p) \#执行两次 john --wordlist=hash.txt --format=bcrypt bphash.txt --fork=32 Loaded 1 password hash (bcrypt [Blowfish 32/64 X3]) Node numbers 1-32 of 32 (fork) Press 'q' or Ctrl-C to abort, almost any other key for status 1 0g 0:00:04:21 100% 0g/s 45.26p/s 45.26c/s 45.26C/s mmkztu6fe1m68mwf7vl1g3grjzmocia043pmno83q3ati98c8r324dzc0hc7n41p6tdjg6p1..mmkztu6fe1m68mwf7vl1g3grjzmocia043pmno83q3ati98c8r324dzc0hc7n41p6tdjg6pv Waiting for 31 children to terminate kztu6fe1m68mwf7vl1g3grjzmocia043pmno83q3ati98c8r324dzc0hc7n41p6tdjg6p7ld (?) 21 1g 0:00:07:40 100% 0.002169g/s 4.562p/s 4.562c/s 4.562C/s kztu6fe1m68mwf7vl1g3grjzmocia043pmno83q3ati98c8r324dzc0hc7n41p6tdjg6p7ld..lkztu6fe1m68mwf7vl1g3grjzmocia043pmno83q3ati98c8r324dzc0hc7n41p6tdjg6p7o Untitled 2.png Untitled 3.png 随意的分割线 Untitled 4.png Untitled 5.png 有压缩包 可是foremost 分离不出来手动 $ dd of=1.zlib if=162667949263zeawq5r24j.png bs=1 skip=83 232949+0 records in 232949+0 records out 232949 bytes transferred in 0.407116 secs (572193 bytes/sec) # liujg @ MBA in ~/Downloads/安全杂项题目 [19:52:50] $ ls 1.zlib # liujg @ MBA in ~/Downloads/安全杂项题目 [19:52:54] $ ls 1.zlib 1.zlib.cpgz # liujg @ MBA in ~/Downloads/安全杂项题目 [19:56:08] $ file 1.zlib.cpgz 1.zlib.cpgz: gzip compressed data, last modified: Tue Jul 27 11:54:44 2021, from Unix, original size modulo 2^32 233480 # liujg @ MBA in ~/Downloads/安全杂项题目 [19:56:13] $ giveup