[20171214]hashcat破解oracle口令.txt

hashcat is the world's fastest and most advanced password recovery utility, supporting five unique modes of attack for
over 200 highly-optimized hashing algorithms. hashcat currently supports CPUs, GPUs, and other hardware accelerators on
Linux, Windows, and OSX, and has facilities to help enable distributed password cracking.

--//hashcat号称最快的破解程序,支持CPU,GPU.本人也不是搞数据库安全的,自己也测试看看oracle口令破解:

1.环境:

SCOTT@book> @ &r/ver1
PORT_STRING                    VERSION        BANNER
------------------------------ -------------- --------------------------------------------------------------------------------
x86_64/Linux 2.4.xx            11.2.0.4.0     Oracle Database 11g Enterprise Edition Release 11.2.0.4.0 - 64bit Production

SCOTT@book> column spare4 format a62
SCOTT@book> select NAME,SPARE4,PASSWORD from sys.user$ where name='SCOTT';
NAME                 SPARE4                                                         PASSWORD
-------------------- -------------------------------------------------------------- ------------------------------
SCOTT                S:960B7BCEF95E6A3F4F0E828726D4FA3D2A6EDCD526510491A3524AFA2913 0EDE56329E1D82EA

2.下载hashcat软件:
--//下载地址:hashcat.net/hashcat/
--//说明:我下载当前版本4.0.1在windows与linux机器都无法执行.
--//在windows下报如下错误:
R:\hashcat-4.0.1>hashcat64.exe -t 32 -a 7 example0.hash ?a?a?a?a example.dict --force
hashcat (v4.0.1) starting...

clGetDeviceInfo(): CL_INVALID_VALUE

Started: Fri Dec 15 09:00:01 2017
Stopped: Fri Dec 15 09:00:02 2017
--//linux下g报lib版本太低.放弃在linux的测试:
# ./hashcat64.bin
./hashcat64.bin: /lib64/libc.so.6: version `GLIBC_2.14' not found (required by ./hashcat64.bin)
./hashcat64.bin: /lib64/libc.so.6: version `GLIBC_2.15' not found (required by ./hashcat64.bin)

--//最终我选择v3.00的版本.也是最低的版本.但是在linux依旧glib版本太低,只能在windows下测试.(注我不想升级glib在linux下,主要
--//害怕出问题).

3.测试oracle 7+口令的破解:
--//先看看hashcat64.exe --help,命令行真复杂,这是我看到最复杂命令行程序,不过它支持的破解也是最全的软件.我仅仅测试oracle口
--//令的破解:

--//hashcat -m 参数支持数据库的参数列表
     12 | PostgreSQL                                       | Database Server
    131 | MSSQL(2000)                                      | Database Server
    132 | MSSQL(2005)                                      | Database Server
   1731 | MSSQL(2012)                                      | Database Server
   1731 | MSSQL(2014)                                      | Database Server
    200 | MySQL323                                         | Database Server
    300 | MySQL4.1/MySQL5                                  | Database Server
   3100 | Oracle H: Type (Oracle 7+)                       | Database Server
    112 | Oracle S: Type (Oracle 11+)                      | Database Server
  12300 | Oracle T: Type (Oracle 12+)                      | Database Server
   8000 | Sybase ASE                                       | Database Server

--//oracle 7-10g:
--//oracle 7-10g口令要包括用户名+口令

--//建立文件a.hash:
R:\hashcat>cat a.hash
0EDE56329E1D82EA:SCOTT

R:\hashcat>hashcat64.exe -m 3100 a.hash example.dict
hashcat (v3.00-1-g67a8d97) starting...

OpenCL Platform #1: Advanced Micro Devices, Inc.
================================================
- Device #1: Turks, 766/1024 MB allocatable, 6MCU

ATTENTION! Unsupported or incorrectly installed Catalyst driver detected!
You are STRONGLY encouraged to use the official supported catalyst driver
See hashcat's homepage for official supported catalyst drivers
Also see: http://hashcat.net/wiki/doku.php?id=upgrading_amd_drivers_how_to
You can use --force to override this but do not post error reports if you do so
--//说明:可能是我显卡版本驱动太低,不支持一些特性,必须加--force,估计不能使用gpu解密..^_^.

R:\hashcat>hashcat64.exe -m 3100 a.hash example.dict --force
hashcat (v3.00-1-g67a8d97) starting...

OpenCL Platform #1: Advanced Micro Devices, Inc.
================================================
- Device #1: Turks, 766/1024 MB allocatable, 6MCU
- Device #2:         Intel(R) Core(TM) i5-3470 CPU @ 3.20GHz, skipped

WARNING: ADL_Overdrive6_TargetTemperatureData_Get is missing from ADL shared library.
Hashes: 1 hashes; 1 unique digests, 1 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates
Rules: 1
Applicable Optimizers:
* Zero-Byte
* Not-Iterated
* Single-Hash
* Single-Salt
Watchdog: Temperature abort trigger disabled
Watchdog: Temperature retain trigger disabled

- Device #1: Kernel m03100_a0.2258b51f.kernel not found in cache! Building may take a while...
Generated dictionary stats for example.dict: 1080240 bytes, 129988 words, 129988 keyspace

0EDE56329E1D82EA:SCOTT:BOOK
--//破解成功,另外破解的口令保存在hashcat.pot文件.下次运行不会破解.我这里为了测试需要,每次测试前都删除这个文件.

Session.Name...: hashcat
Status.........: Cracked
Input.Mode.....: File (example.dict)
Hash.Target....: 0EDE56329E1D82EA:SCOTT
Hash.Type......: Oracle H: Type (Oracle 7+)
Time.Started...: 0 secs
Speed.Dev.#1...:  4542.9 kH/s (11.07ms)
Recovered......: 1/1 (100.00%) Digests, 1/1 (100.00%) Salts
Progress.......: 75264/129988 (57.90%)
Rejected.......: 0/75264 (0.00%)
Restore.Point..: 0/129988 (0.00%)

Started: Thu Dec 14 15:18:28 2017
Stopped: Thu Dec 14 15:18:40 2017

4.测试oracle 11g口令破解:
--//我在这里卡了一下,实际上要满足hash文件的格式要求,在加密串与slot之间加入冒号分割.

--//建立文件如下,oracle11g的口令后面20位作为slot,要在加密串偏移40的位置加入冒号,建立文本如下:
R:\hashcat>cat b.hash
960B7BCEF95E6A3F4F0E828726D4FA3D2A6EDCD5:26510491A3524AFA2913

--//2种方式都可以破解
--//-m 110 必须加参数--hex-salt ,至少我这个版本这样.
--//-m 112 也支持(说明:上一些论坛,说hashcat不支持-m 112参数.)

R:\hashcat>hashcat64.exe -m 110 --hex-salt b.hash exam.dict --force
hashcat (v3.00-1-g67a8d97) starting...

OpenCL Platform #1: Advanced Micro Devices, Inc.
================================================
- Device #1: Turks, 766/1024 MB allocatable, 6MCU
- Device #2:         Intel(R) Core(TM) i5-3470 CPU @ 3.20GHz, skipped

WARNING: ADL_Overdrive6_TargetTemperatureData_Get is missing from ADL shared library.
Hashes: 1 hashes; 1 unique digests, 1 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates
Rules: 1
Applicable Optimizers:
* Zero-Byte
* Precompute-Init
* Precompute-Merkle-Demgard
* Early-Skip
* Not-Iterated
* Appended-Salt
* Single-Hash
* Single-Salt
* Raw-Hash
Watchdog: Temperature abort trigger disabled
Watchdog: Temperature retain trigger disabled

- Device #1: Kernel m00110_a0.2258b51f.kernel not found in cache! Building may take a while...
--//这里很慢,等待2-3分钟...第2次执行就不会这样慢了.为此我建立了1个小字典文件,好像时间也没有变化.
Generated dictionary stats for exam.dict: 6 bytes, 1 words, 1 keyspace

ATTENTION!
  The wordlist or mask you are using is too small.
  Therefore, hashcat is unable to utilize the full parallelization power of your device(s).
  The cracking speed will drop.
  Workaround: https://hashcat.net/wiki/doku.php?id=frequently_asked_questions#how_to_create_more_work_for_full_speed

INFO: approaching final keyspace, workload adjusted

960b7bcef95e6a3f4f0e828726d4fa3d2a6edcd5:26510491a3524afa2913:book

Session.Name...: hashcat
Status.........: Cracked
Input.Mode.....: File (exam.dict)
Hash.Target....: 960b7bcef95e6a3f4f0e828726d4fa3d2a6edcd5:...
Hash.Type......: sha1($pass.$salt)
Time.Started...: 0 secs
Speed.Dev.#1...:        0 H/s (0.18ms)
Recovered......: 1/1 (100.00%) Digests, 1/1 (100.00%) Salts
Progress.......: 1/1 (100.00%)
Rejected.......: 0/1 (0.00%)

Started: Thu Dec 14 16:07:13 2017
Stopped: Thu Dec 14 16:09:40 2017

--//会在kernels目录建立一些文件
R:\hashcat>dir kernels\*
 驱动器 R 中的卷是 RAMDISK
 卷的序列号是 0122-14E0

R:\hashcat\kernels 的目录

2017/12/15  08:44    <DIR>          .
2017/12/15  08:44    <DIR>          ..
2017/12/14  16:19           390,240 amp_a0.2258b51f.kernel
2017/12/14  16:05         2,111,020 m00000_a0.2258b51f.kernel
2017/12/14  16:09         2,837,428 m00110_a0.2258b51f.kernel
2017/12/15  08:44           807,128 m00110_a3.2258b51f.kernel
2017/12/14  16:19           433,952 m00500.2258b51f.kernel
2017/12/14  15:18           977,440 m03100_a0.2258b51f.kernel
2017/12/14  15:25           977,440 m03100_a0.d9e822e7.kernel
2017/12/15  08:44            50,808 markov_be.2258b51f.kernel
               8 个文件      8,585,456 字节
               2 个目录    716,163,072 可用字节

--//我在linux下看文件格式视乎是一些执行文件:
# file amp_a0.2258b51f.kernel
amp_a0.2258b51f.kernel: ELF 32-bit LSB executable, version 1 (SYSV), corrupted program header size, not stripped
# file m03100_a0.2258b51f.kernel
m03100_a0.2258b51f.kernel: ELF 32-bit LSB executable, version 1 (SYSV), corrupted program header size, not stripped

--//使用-m 112参数测试,注意测试前删除hashcat.pot,不然什么也不做-m 112加不加--hex-salt都可以破解:
hashcat64.exe -m 112 b.hash example.dict --force
hashcat64.exe -m 112 --hex-salt b.hash example.dict --force

R:\hashcat>hashcat64.exe -m 112 --hex-salt b.hash example.dict --force
hashcat (v3.00-1-g67a8d97) starting...

OpenCL Platform #1: Advanced Micro Devices, Inc.
================================================
- Device #1: Turks, 766/1024 MB allocatable, 6MCU
- Device #2:         Intel(R) Core(TM) i5-3470 CPU @ 3.20GHz, skipped

WARNING: ADL_Overdrive6_TargetTemperatureData_Get is missing from ADL shared library.
Hashes: 1 hashes; 1 unique digests, 1 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates
Rules: 1
Applicable Optimizers:
* Zero-Byte
* Precompute-Init
* Precompute-Merkle-Demgard
* Early-Skip
* Not-Iterated
* Appended-Salt
* Single-Hash
* Single-Salt
* Raw-Hash
Watchdog: Temperature abort trigger disabled
Watchdog: Temperature retain trigger disabled

Cache-hit dictionary stats example.dict: 1080240 bytes, 129988 words, 129988 keyspace

960b7bcef95e6a3f4f0e828726d4fa3d2a6edcd5:26510491a3524afa2913:book

Session.Name...: hashcat
Status.........: Cracked
Input.Mode.....: File (example.dict)
Hash.Target....: 960b7bcef95e6a3f4f0e828726d4fa3d2a6edcd5:...
Hash.Type......: Oracle S: Type (Oracle 11+)
Time.Started...: 0 secs
Speed.Dev.#1...:  2849.4 kH/s (11.79ms)
Recovered......: 1/1 (100.00%) Digests, 1/1 (100.00%) Salts
Progress.......: 64512/129988 (49.63%)
Rejected.......: 0/64512 (0.00%)
Restore.Point..: 0/129988 (0.00%)

Started: Fri Dec 15 09:26:36 2017
Stopped: Fri Dec 15 09:26:38 2017

5.补充linux服务起口令如何破解:
--//实际上这个破解主要了解-m后面的参数,linux的口令应该是500.
    500 | Cisco-IOS $1$                                    | Operating-Systems

$1$ZcwH7AWX$0BlZZRahwsQ4hLIEUTBN5.
--//注意后面的点(在我测试是必须的,不是多余的字符,原来的口令加密串就有这个点,我开始测试少了这个点,老是报错)
R:\hashcat>hashcat64 -m 500 l.hash example.dict --force
hashcat (v3.00-1-g67a8d97) starting...
WARNING: Hashfile 'l.hash' on line 1 ($1$ZcwH7AWX$0BlZZRahwsQ4hLIEUTBN5): Hash-length exception
Parsed Hashes: 1/1 (100.00%)
ERROR: No hashes loaded
--//关于linux口令可以参考连接:http://blog.itpub.net/267265/viewspace-2084794/
--//建立文件l.hash.

R:\hashcat>cat l.hash
$1$ZcwH7AWX$0BlZZRahwsQ4hLIEUTBN5.

R:\hashcat>hashcat64 -m 500 l.hash exam.dict --force
hashcat (v3.00-1-g67a8d97) starting...

OpenCL Platform #1: Advanced Micro Devices, Inc.
================================================
- Device #1: Turks, 766/1024 MB allocatable, 6MCU
- Device #2:         Intel(R) Core(TM) i5-3470 CPU @ 3.20GHz, skipped

WARNING: ADL_Overdrive6_TargetTemperatureData_Get is missing from ADL shared library.
Hashes: 1 hashes; 1 unique digests, 1 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates
Rules: 1
Applicable Optimizers:
* Zero-Byte
* Single-Hash
* Single-Salt
Watchdog: Temperature abort trigger disabled
Watchdog: Temperature retain trigger disabled

Generated dictionary stats for exam.dict: 14 bytes, 2 words, 2 keyspace

ATTENTION!
  The wordlist or mask you are using is too small.
  Therefore, hashcat is unable to utilize the full parallelization power of your device(s).
  The cracking speed will drop.
  Workaround: https://hashcat.net/wiki/doku.php?id=frequently_asked_questions#how_to_create_more_work_for_full_speed

INFO: approaching final keyspace, workload adjusted

$1$ZcwH7AWX$0BlZZRahwsQ4hLIEUTBN5.:123456

Session.Name...: hashcat
Status.........: Cracked
Input.Mode.....: File (exam.dict)
Hash.Target....: $1$ZcwH7AWX$0BlZZRahwsQ4hLIEUTBN5.
Hash.Type......: md5crypt, MD5(Unix), FreeBSD MD5, Cisco-IOS MD5
Time.Started...: 0 secs
Speed.Dev.#1...:        0 H/s (6.51ms)
Recovered......: 1/1 (100.00%) Digests, 1/1 (100.00%) Salts
Progress.......: 2/2 (100.00%)
Rejected.......: 0/2 (0.00%)

Started: Thu Dec 14 16:20:43 2017
Stopped: Thu Dec 14 16:20:46 2017

--//hash值也可以直接写在命令行,例子:
R:\hashcat>hashcat64 -m 500 $1$ZcwH7AWX$0BlZZRahwsQ4hLIEUTBN5. example.dict --force
hashcat (v3.00-1-g67a8d97) starting...

OpenCL Platform #1: Advanced Micro Devices, Inc.
================================================
- Device #1: Turks, 766/1024 MB allocatable, 6MCU
- Device #2:         Intel(R) Core(TM) i5-3470 CPU @ 3.20GHz, skipped

WARNING: ADL_Overdrive6_TargetTemperatureData_Get is missing from ADL shared library.
Hashes: 1 hashes; 1 unique digests, 1 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates
Rules: 1
Applicable Optimizers:
* Zero-Byte
* Single-Hash
* Single-Salt
Watchdog: Temperature abort trigger disabled
Watchdog: Temperature retain trigger disabled

Cache-hit dictionary stats example.dict: 1080240 bytes, 129988 words, 129988 keyspace

$1$ZcwH7AWX$0BlZZRahwsQ4hLIEUTBN5.:123456

Session.Name...: hashcat
Status.........: Cracked
Input.Mode.....: File (example.dict)
Hash.Target....: $1$ZcwH7AWX$0BlZZRahwsQ4hLIEUTBN5.
Hash.Type......: md5crypt, MD5(Unix), FreeBSD MD5, Cisco-IOS MD5
Time.Started...: 0 secs
Speed.Dev.#1...:   121.9 kH/s (10.09ms)
Recovered......: 1/1 (100.00%) Digests, 1/1 (100.00%) Salts
Progress.......: 6144/129988 (4.73%)
Rejected.......: 0/6144 (0.00%)
Restore.Point..: 4608/129988 (3.54%)

Started: Fri Dec 15 09:35:04 2017
Stopped: Fri Dec 15 09:35:06 2017

6.总结:
--//实际上hashcat很复杂,支持许多参数,各种口令的变化组合.许多知识点是我的空白,我仅仅学习如何使用.
--//建立大家建立数据库口令.至少拿这些软件检查看看,不要找一个口令几分钟就crack.^_^.

--//补充一些测试与学习:
hashcat64 --help

- [ Attack Modes ] -
--//-a 参数

# | Mode
 ===+======
  0 | Straight
  1 | Combination
  3 | Brute-force
  6 | Hybrid Wordlist + Mask
  7 | Hybrid Mask + Wordlist

- [ Built-in Charsets ] -

? | Charset
 ===+=========
  l | abcdefghijklmnopqrstuvwxyz
  u | ABCDEFGHIJKLMNOPQRSTUVWXYZ
  d | 0123456789
  s |  !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~
  a | ?l?u?d?s
  b | 0x00 - 0xff

--"

- [ Basic Examples ] -

Attack-          | Hash- |
  Mode             | Type  | Example command
 ==================+=======+==================================================================
  Wordlist         | $P$   | hashcat -a 0 -m 400 example400.hash example.dict
  Wordlist + Rules | MD5   | hashcat -a 0 -m 0 example0.hash example.dict -r rules/best64.rule
  Brute-Force      | MD5   | hashcat -a 3 -m 0 example0.hash ?a?a?a?a?a?a
  Combinator       | MD5   | hashcat -a 1 -m 0 example0.hash example.dict example.dict

--//奇怪破解linux口令不支持字符集操作.视乎不能与-m参数结合在一起.
R:\hashcat>hashcat64 -a 0  -m 500 l.hash example.dict ?d?d?d?d?d?d  --force
hashcat (v3.00-1-g67a8d97) starting...
OpenCL Platform #1: Advanced Micro Devices, Inc.
================================================
- Device #1: Turks, 766/1024 MB allocatable, 6MCU
- Device #2:         Intel(R) Core(TM) i5-3470 CPU @ 3.20GHz, skipped

WARNING: ADL_Overdrive6_TargetTemperatureData_Get is missing from ADL shared library.
Hashes: 1 hashes; 1 unique digests, 1 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates
Rules: 1
Applicable Optimizers:
* Zero-Byte
* Single-Hash
* Single-Salt
Watchdog: Temperature abort trigger disabled
Watchdog: Temperature retain trigger disabled
ERROR: ?d?d?d?d?d?d: No such file or directory

R:\hashcat>hashcat64 -t 32 -a 7  -m 500 l.hash example.dict ?a?a?a?a  --force
hashcat (v3.00-1-g67a8d97) starting...
OpenCL Platform #1: Advanced Micro Devices, Inc.
================================================
- Device #1: Turks, 766/1024 MB allocatable, 6MCU
- Device #2:         Intel(R) Core(TM) i5-3470 CPU @ 3.20GHz, skipped
WARNING: ADL_Overdrive6_TargetTemperatureData_Get is missing from ADL shared library.
Hashes: 1 hashes; 1 unique digests, 1 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates
Applicable Optimizers:
* Zero-Byte
* Single-Hash
* Single-Salt
Watchdog: Temperature abort trigger disabled
Watchdog: Temperature retain trigger disabled
ERROR: ?a?a?a?a: No such file or directory
--//不知道这种 ?a?a 如何使用.

--//测试md5字符串的破解:
# echo -n 1a2b3c | md5sum
bf4ab447496f2d3d5a6c77c2cd12f996  -

--//注意这里echo 参数-n是必须的,避免回车字符.另外不要在windwos下执行,不知道为什么windows与linux结果不同.
R:\hashcat>echo -n 1a2b3c | md5sum
1e1a52ad526995f5ae0f51d9bdbff204 *-

R:\hashcat>cat z.hash
bf4ab447496f2d3d5a6c77c2cd12f996

R:\hashcat>hashcat64   z.hash example.dict   --force
hashcat (v3.00-1-g67a8d97) starting...
OpenCL Platform #1: Advanced Micro Devices, Inc.
================================================
- Device #1: Turks, 766/1024 MB allocatable, 6MCU
- Device #2:         Intel(R) Core(TM) i5-3470 CPU @ 3.20GHz, skipped
WARNING: ADL_Overdrive6_TargetTemperatureData_Get is missing from ADL shared library.
Hashes: 1 hashes; 1 unique digests, 1 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates
Rules: 1
Applicable Optimizers:
* Zero-Byte
* Precompute-Init
* Precompute-Merkle-Demgard
* Meet-In-The-Middle
* Early-Skip
* Not-Salted
* Not-Iterated
* Single-Hash
* Single-Salt
* Raw-Hash
Watchdog: Temperature abort trigger disabled
Watchdog: Temperature retain trigger disabled
Cache-hit dictionary stats example.dict: 1080240 bytes, 129988 words, 129988 keyspace
ATTENTION!
  The wordlist or mask you are using is too small.
  Therefore, hashcat is unable to utilize the full parallelization power of your device(s).
  The cracking speed will drop.
  Workaround: https://hashcat.net/wiki/doku.php?id=frequently_asked_questions#how_to_create_more_work_for_full_speed

INFO: approaching final keyspace, workload adjusted

bf4ab447496f2d3d5a6c77c2cd12f996:1a2b3c

Session.Name...: hashcat
Status.........: Cracked
Input.Mode.....: File (example.dict)
Hash.Target....: bf4ab447496f2d3d5a6c77c2cd12f996
Hash.Type......: MD5
Time.Started...: 0 secs
Speed.Dev.#1...: 10589.1 kH/s (6.52ms)
Recovered......: 1/1 (100.00%) Digests, 1/1 (100.00%) Salts
Progress.......: 129988/129988 (100.00%)
Rejected.......: 0/129988 (0.00%)

Started: Fri Dec 15 10:25:21 2017
Stopped: Fri Dec 15 10:25:23 2017

--//如果我修改如下,使用example.dict就无法破解要加入其它参数才行.
# echo -n 1a2B3c | md5sum
cf57cddc51ae1c171b69e7f333e398a7  -

R:\hashcat>hashcat64  -m 0 cf57cddc51ae1c171b69e7f333e398a7 example.dict   --force
hashcat (v3.00-1-g67a8d97) starting...

OpenCL Platform #1: Advanced Micro Devices, Inc.
================================================
- Device #1: Turks, 766/1024 MB allocatable, 6MCU
- Device #2:         Intel(R) Core(TM) i5-3470 CPU @ 3.20GHz, skipped

WARNING: ADL_Overdrive6_TargetTemperatureData_Get is missing from ADL shared library.
Hashes: 1 hashes; 1 unique digests, 1 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates
Rules: 1
Applicable Optimizers:
* Zero-Byte
* Precompute-Init
* Precompute-Merkle-Demgard
* Meet-In-The-Middle
* Early-Skip
* Not-Salted
* Not-Iterated
* Single-Hash
* Single-Salt
* Raw-Hash
Watchdog: Temperature abort trigger disabled
Watchdog: Temperature retain trigger disabled

Cache-hit dictionary stats example.dict: 1080240 bytes, 129988 words, 129988 keyspace

ATTENTION!
  The wordlist or mask you are using is too small.
  Therefore, hashcat is unable to utilize the full parallelization power of your device(s).
  The cracking speed will drop.
  Workaround: https://hashcat.net/wiki/doku.php?id=frequently_asked_questions#how_to_create_more_work_for_full_speed

INFO: approaching final keyspace, workload adjusted

Session.Name...: hashcat
Status.........: Exhausted
Input.Mode.....: File (example.dict)
Hash.Target....: 349a62b7eb59892d7a06dfa37c0128db
Hash.Type......: MD5
Time.Started...: 0 secs
Speed.Dev.#1...: 17978.3 kH/s (6.46ms)
Recovered......: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts
Progress.......: 129988/129988 (100.00%)
Rejected.......: 0/129988 (0.00%)

Started: Fri Dec 15 10:52:55 2017
Stopped: Fri Dec 15 10:52:57 2017

--//我在linux下使用john就很快.
$ john --format=raw-md5 z.txt
Loaded 1 password hash (Raw MD5 [SSE2i 10x4x3])
1a2B3c           (?)
guesses: 1  time: 0:00:00:03 DONE (Fri Dec 15 11:04:08 2017)  c/s: 7436K  trying: 16lk60 - 1a2BOG
Use the "--show" option to display all of the cracked passwords reliably

[20171214]hashcat破解oracle口令.txt的更多相关文章

  1. [20171213]john破解oracle口令.txt

    [20171213]john破解oracle口令.txt --//跟别人讨论的oracle破解问题,我曾经提过不要使用6位字符以下的密码,其实不管那种系统低于6位口令非常容易破解.--//而且orac ...

  2. [20171101]修改oracle口令安全问题.txt

    [20171101]修改oracle口令安全问题.txt --//等保的问题,做一些关于修改oracle口令方面的测试. 1.oracle修改口令一般如下方式: alter user scott id ...

  3. msf客户端渗透(六):抓包、搜索文件、破解弱口令、修改MACE时间

    嗅探抓包 查看网卡 指定网卡,因为资源有限,默认抓满50000个包如果不dump下来,就会自动销毁掉,从0开始抓. dump嗅探到的文件到本机,传递到本机的过程是结果ssl加密的 dump了两个文件 ...

  4. Python脚本暴力破解FTP口令(ftplib)

    目录 判断FTP服务器是否允许匿名登录 暴力破解FTP口令 列出FTP目录内的网页文件 综合 环境:Windows python2.7.15 ftplib模块是python下用于ftp服务的模块 . ...

  5. [20170728]oracle保留字.txt

    [20170728]oracle保留字.txt --//oracle有许多保留字,我印象最深的就是使用rman备份表空间test,test就是rman里面的保留字.--//还有rman也是rman里面 ...

  6. oracle导入TXT文件

    oracle导入TXT文件: 1.建好对应的表和字段:2.新建test.ctl文件,用记事本编辑写入: OPTIONS (skip) load data INFILE 'E:\8080.txt' -- ...

  7. oracle口令文件在windows和linux系统下的命名和位置

      分类: Oracle 1.windows系统下 oracle口令文件在:$ORACLE_HOME/database目录下: 命名规则为:PWD$SID.ora   2.linux系统下 oracl ...

  8. Python脚本暴力破解SSH口令以及构建僵尸网络(pxssh)

    目录 暴力破解SSH口令 SSH远端执行命令 构建僵尸网络 环境:Kali Linux  python 2.7.13 暴力破解SSH口令 Pxssh是pexpect库的ssh专用脚本,他能用预先写好的 ...

  9. mysql破解root口令

    破解root口令 [root@centos8 ~]#vim /etc/my.cnf [mysqld] skip-grant-tables #取消密码验证 skip-networking # mysql ...

随机推荐

  1. [EXP]Adobe ColdFusion 2018 - Arbitrary File Upload

    # Exploit Title: Unrestricted # Google Dork: ext:cfm # Date: -- # Exploit Author: Pete Freitag of Fo ...

  2. chrome如何添加扩展程序及登录

    https://jingyan.baidu.com/album/7e440953191a2b2fc0e2ef0c.html?picindex=3

  3. 目标检测模型的性能评估--MAP(Mean Average Precision)

    目标检测模型中性能评估的几个重要参数有精确度,精确度和召回率.本文中我们将讨论一个常用的度量指标:均值平均精度,即MAP. 在二元分类中,精确度和召回率是一个简单直观的统计量,但是在目标检测中有所不同 ...

  4. 附实例!实现iframe父窗体与子窗体的通信

    欢迎大家前往腾讯云+社区,获取更多腾讯海量技术实践干货哦~ 本文由前端林子发表于云+社区专栏 本文主要会介绍如何基于MessengerJS,实现iframe父窗体与子窗体间的通信,传递数据信息.同时本 ...

  5. netty源码解解析(4.0)-3 Channel的抽象实现

    AbstractChannel和AbstractUnsafe抽象类 io.netty.channel.AbstractChannel 从本章开始,会有大量的篇幅涉及到代码分析.为了能够清晰简洁的地说明 ...

  6. python中逻辑运算符“+”的特殊之处

    num = num + num 与 num += num 的区别(其他语言中这两种方式可以划等号,但是python中不可以): num = num + num: num = [100] def tes ...

  7. spring boot(二): spring boot+jdbctemplate+sql server

    前言 小项目或者做demo时可以使用jdbc+sql server解决即可,这篇就基于spring boot环境使用jdbc连接sql server数据库,和spring mvc系列保持一致. 在sp ...

  8. CRC 校验原理及步骤

    什么是 CRC 校验? CRC 即循环冗余校验码:是数据通信领域中最常用的一种查错校验码,其特征是信息字段和校验字段的长度可以任意选定.循环冗余检查(CRC)是一种数据传输检错功能,对数据进行多项式计 ...

  9. C语言之链表的使用

    C语言链表初学者都说很难,今天就来为大家讲讲链表 讲链表之前不得不介绍一下结构体,在链表学习之前大家都应该已经学了结构体,都知道结构体里面能有许多变量,每个变量可以当做这个结构体的属性,例如: str ...

  10. Spark集群的任务提交执行流程

    本文转自:https://www.linuxidc.com/Linux/2018-02/150886.htm 一.Spark on Standalone 1.spark集群启动后,Worker向Mas ...