当前位置:WooYun(白帽子技术社区) >> 算法与协议 >> 转译:几种常见的hash加密

转译:几种常见的hash加密

upload (Van Helsing) | 2013-01-24 01:45

常见的hash加密(来自国外某论坛)

---------------*nix系------------------------
系统:ES(Unix)
例子: IvS7aeT4NzQPM
说明:Linux或者其他linux内核系统中
长度: 13 个字符
描述:第1、2位为salt,例子中的'Iv'位salt,后面的为hash值

系统:MD5(Unix)
例子:$1$12345678$XM4P3PrKBgKNnTaqG9P0T/
说明:Linux或者其他linux内核系统中
长度:34个字符
描述:开始的$1$位为加密标志,后面8位12345678为加密使用的salt,后面的为hash
加密算法:2000次循环调用MD5加密

系统:SHA-512(Unix)
例子:$6$12345678$U6Yv5E1lWn6mEESzKen42o6rbEm
说明:Linux或者其他linux内核系统中
长度: 13 个字符
描述:开始的$6$位为加密标志,后面8位为salt,后面的为hash
加密算法:5000次的SHA-512加密

系统:SHA-256(Unix)
例子:$5$12345678$jBWLgeYZbSvREnuBr5s3gp13vqi
说明:Linux或者其他linux内核系统中
长度: 55 个字符
描述:开始的$5$位为加密标志,后面8位为salt,后面的为hash
加密算法:5000次的SHA-256加密

系统:MD5(APR)
例子:$apr1$12345678$auQSX8Mvzt.tdBi4y6Xgj.
说明:Linux或者其他linux内核系统中
长度:37个字符
描述:开始的$apr1$位为加密标志,后面8位为salt,后面的为hash
加密算法:2000次循环调用MD5加密

-----------------windows------------------------------------------
系统:windows
例子:Admin:b474d48cdfc4974d86ef4d24904cdd91
长度:98个字符
加密算法:MD4(MD4(Unicode($pass)).Unicode(strtolower($username)))

------------------mysql--------------------------------------------
系统:mysql
例子:606717496665bcba
说明:老版本的MySql中
长度:8字节(16个字符)
说明:包括两个字节,且每个字的值不超过0x7fffffff

系统:MySQL5
例子:*E6CC90B878B948C35E92B003C792C46C58C4AF40
说明:较新版本的MySQL
长度:20字节(40位)
加密算法:SHA-1(SHA-1($pass))

------------------其他系统---------------------------------------------

系统:MD5(WordPress)
例子:$P$B123456780BhGFYSlUqGyE6ErKErL01
说明:WordPress使用的md5
长度:34个字符
描述:$P$表示加密类型,然后跟着一位字符,经常是字符‘B’,后面是8位salt,后面是就是hash
加密算法:8192次md5循环加密


系统:MD5(phpBB3)
说明:phpBB 3.x.x.使用
例子:$H$9123456785DAERgALpsri.D9z3ht120
长度:34个字符
描述:开始的$H$为加密标志,后面跟着一个字符,一般的都是字符‘9’,然后是8位salt,然后是hash   值
加密算法:2048次循环调用MD5加密

系统:RAdmin v2.x
说明:Remote Administrator v2.x版本中
例子:5e32cceaafed5cc80866737dfb212d7f
长度:16字节(32个字符)
加密算法:字符用0填充到100字节后,将填充过后的字符经过md5加密得到(32位值)

------------------------md5加密--------------------------------------------

标准MD5
例子:c4ca4238a0b923820dcc509a6f75849b
使用范围:phpBB v2.x, Joomla 的 1.0.13版本前,及其他cmd
长度:16个字符
其他的加salt及变形类似:

md5($pass.$salt)
例子: 6f04f0d75f6870858bae14ac0b6d9f73:1234

md5($salt.$pass)
例子:f190ce9ac8445d249747cab7be43f7d5:12

md5(md5($pass))
例子:28c8edde3d61a0411511d3b1866f0636

md5(md5($pass).$salt)
例子:6011527690eddca23580955c216b1fd2:wQ6

md5(md5($salt).md5($pass))
例子: 81f87275dd805aa018df8befe09fe9f8:wH6_S

md5(md5($salt).$pass)
例子: 816a14db44578f516cbaef25bd8d8296:1234

md5($salt.$pass.$salt)
例子: a3bc9e11fddf4fef4deea11e33668eab:1234

md5($salt.md5($salt.$pass))
例子: 1d715e52285e5a6b546e442792652c8a:1234


-------------------------完---------------------------------------

分享到:
  1. 1#
    回复此人 感谢
    冰锋刺客 (往日不可追) | 2013-01-24 04:42

    很实用,很强大
    1.gif

  2. 2#
    回复此人 感谢
    se55i0n (那些年,我们一起看的岛国动作片~) | 2013-01-24 09:47

    学习了~

  3. 3#
    回复此人 感谢
    GaRY | 2013-01-24 10:40

    科普的好,此领域内容较少,这贴做科普正合适

  4. 4#
    回复此人 感谢
    小胖子 (z7y首席代言人,园长的表哥...) | 2013-01-24 10:57

    很强大!

  5. 5#
    回复此人 感谢
    请叫我大神 | 2013-01-24 11:08

    多谢楼主,
    BTW 有一种工具叫 hash-identifier
    http://code.google.com/p/hash-identifier/
    CC @GaRY 知晓

  6. 6#
    回复此人 感谢
    upload (Van Helsing) | 2013-01-24 11:22

    @请叫我大神 nice share bro

  7. 7#
    回复此人 感谢
    missdiog | 2013-01-24 11:37

    http://willson.sinaapp.com/2011/11/%E6%80%8E%E4%B9%88%E5%88%A4%E6%96%ADhash%E7%9A%84%E7%B1%BB%E5%9E%8B.html

    DES(Unix)
    Example: IvS7aeT4NzQPM
    Used in Linux and other similar OS.
    Length: 13 characters.
    Description: The first two characters are the salt (random characters; in our example the salt is the string “Iv”), then there follows the actual hash.
    Notes: [1] [2]

    Domain Cached Credentials
    Example: Admin:b474d48cdfc4974d86ef4d24904cdd91
    Used for caching passwords of Windows domain.
    Length: 16 bytes.
    Algorithm: MD4(MD4(Unicode($pass)).Unicode(strtolower($username)))
    Note: [1]

    MD5(Unix)
    Example: $1$12345678$XM4P3PrKBgKNnTaqG9P0T/
    Used in Linux and other similar OS.
    Length: 34 characters.
    Description: The hash begins with the $1$ signature, then there goes the salt (up to 8 random characters; in our example the salt is the string “12345678″), then there goes one more $ character, followed by the actual hash.
    Algorithm: Actually that is a loop calling the MD5 algorithm 2000 times.
    Notes: [1] [2]

    MD5(APR)
    Example: $apr1$12345678$auQSX8Mvzt.tdBi4y6Xgj.
    Used in Linux and other similar OS.
    Length: 37 characters.
    Description: The hash begins with the $apr1$ signature, then there goes the salt (up to 8 random characters; in our example the salt is the string “12345678″), then there goes one more $ character, followed by the actual hash.
    Algorithm: Actually that is a loop calling the MD5 algorithm 2000 times.
    Notes: [1] [2]

    MD5(phpBB3)
    Example: $H$9123456785DAERgALpsri.D9z3ht120
    Used in phpBB 3.x.x.
    Length: 34 characters.
    Description: The hash begins with the $H$ signature, then there goes one character (most often the number ’9′), then there goes the salt (8 random characters; in our example the salt is the string “12345678″), followed by the actual hash.
    Algorithm: Actually that is a loop calling the MD5 algorithm 2048 times.
    Notes: [1] [2]

    MD5(WordPress)
    Example: $P$B123456780BhGFYSlUqGyE6ErKErL01
    Used in WordPress.
    Length: 34 characters.
    Description: The hash begins with the $P$ signature, then there goes one character (most often the number ‘B’), then there goes the salt (8 random characters; in our example the salt is the string “12345678″), followed by the actual hash.
    Algorithm: Actually that is a loop calling the MD5 algorithm 8192 times.
    Notes: [1] [2]

    MySQL
    Example: 606717496665bcba
    Used in the old versions of MySQL.
    Length: 8 bytes.
    Description: The hash consists of two DWORDs, each not exceeding the value of 0x7fffffff.

    MySQL5
    Example: *E6CC90B878B948C35E92B003C792C46C58C4AF40
    Used in the new versions of MySQL.
    Length: 20 bytes.
    Algorithm: SHA-1(SHA-1($pass))
    Note: The hashes are to be loaded to the program without the asterisk that stands in the beginning of each hash.

    RAdmin v2.x
    Example: 5e32cceaafed5cc80866737dfb212d7f
    Used in the application Remote Administrator v2.x.
    Length: 16 bytes.
    Algorithm: The password is padded with zeros to the length of 100 bytes, then that entire string is hashed with the MD5 algorithm.

    MD5
    Example: c4ca4238a0b923820dcc509a6f75849b
    Used in phpBB v2.x, Joomla version below 1.0.13 and many other forums and CMS.
    Length: 16 bytes.
    Algorithm: Same as the md5() function in PHP.

    md5($pass.$salt)
    Example: 6f04f0d75f6870858bae14ac0b6d9f73:1234
    Used in WB News, Joomla version 1.0.13 and higher.
    Length: 16 bytes.
    Note: [1]

    md5($salt.$pass)
    Example: f190ce9ac8445d249747cab7be43f7d5:12
    Used in osCommerce, AEF, Gallery and other CMS.
    Length: 16 bytes.
    Note: [1]

    md5(md5($pass))
    Example: 28c8edde3d61a0411511d3b1866f0636
    Used in e107, DLE, AVE, Diferior, Koobi and other CMS.
    Length: 16 bytes.

    md5(md5($pass).$salt)
    Example: 6011527690eddca23580955c216b1fd2:wQ6
    Used in vBulletin, IceBB.
    Length: 16 bytes.
    Notes: [1] [3] [4]

    md5(md5($salt).md5($pass))
    Example: 81f87275dd805aa018df8befe09fe9f8:wH6_S
    Used in IPB.
    Length: 16 bytes.
    Notes: [1] [3]

    md5(md5($salt).$pass)
    Example: 816a14db44578f516cbaef25bd8d8296:1234
    Used in MyBB.
    Length: 16 bytes.
    Note: [1]

    md5($salt.$pass.$salt)
    Example: a3bc9e11fddf4fef4deea11e33668eab:1234
    Used in TBDev.
    Length: 16 bytes.
    Note: [1]

    md5($salt.md5($salt.$pass))
    Example: 1d715e52285e5a6b546e442792652c8a:1234
    Used in DLP.
    Length: 16 bytes.
    Note: [1]

    SHA-1
    Example: 356a192b7913b04c54574d18c28d46e6395428ab
    Used in many forums and CMS.
    Length: 20 bytes.
    Algorithm: Same as the sha1() function in PHP.

    sha1(strtolower($username).$pass)
    Example: Admin:6c7ca345f63f835cb353ff15bd6c5e052ec08e7a
    Used in SMF.
    Length: 20 bytes.
    Note: [1]

    sha1($salt.sha1($salt.sha1($pass)))
    Example: cd37bfbf68d198d11d39a67158c0c9cddf34573b:1234
    Used in Woltlab BB.
    Length: 20 bytes.
    Note: [1]

    SHA-256(Unix)
    Example: $5$12345678$jBWLgeYZbSvREnuBr5s3gp13vqiKSNK1rkTk9zYE1v0
    Used in Linux and other similar OS.
    Length: 55 characters.
    Description: The hash begins with the $5$ signature, then there goes the salt (up to 8 random characters; in our example the salt is the string “12345678″), then there goes one more $ character, followed by the actual hash.
    Algorithm: Actually that is a loop calling the SHA-256 algorithm 5000 times.
    Notes: [1] [2]

    SHA-512(Unix)
    Example: $6$12345678$U6Yv5E1lWn6mEESzKen42o6rbEmFNLlq6Ik9X3reMXY3doKEuxrcDohKUx0Oxf44aeTIxGEjssvtT1aKyZHjs
    Used in Linux and other similar OS.
    Length: 98 characters.
    Description: The hash begins with the $6$ signature, then there goes the salt (up to 8 random characters; in our example the salt is the string “12345678″), then there goes one more $ character, followed by the actual hash.
    Algorithm: Actually that is a loop calling the SHA-512 algorithm 5000 times.
    Notes: [1] [2]

    ————————————————-
    Notes:

    [1] Since the hashing requires not only a password but also a salt (or a user name), which is unique for each user, the attack speed for such hashes will decline proportionally to their count (for example, attacking 100 hashes will go 100 times slower than attacking one hash).

    [2] The hash is to be loaded to the program in full, to the “Hash” column – the program will automatically extract the salt and other required data from it.

    [3] The ‘:’ character can be used as salt; however, since it is used by default for separating hash and salt in PasswordsPro, it is recommended that you use a different character for separating fields; e.g., space.

    [4] Salt can contain special characters – single or double quotes, as well as backslash, which are preceded (after obtaining dumps from MySQL databases) by an additional backslash, which is to be removed manually. For example, the salt to be loaded to the program would be a’4 instead of a\’4, as well as the salts a”4 instead of a\”4 and a\4 instead of a\\4.

  8. 8#
    回复此人 感谢
    missdiog | 2013-01-24 11:38

    另外:unix hash加密方式判断

    unix下:
    $1开头为MD5
    $5开头为SHA256
    $6开头为SHA512
    DES和明文开头无标记

    http://willson.sinaapp.com/2012/05/unix-hash%E5%8A%A0%E5%AF%86%E6%96%B9%E5%BC%8F%E5%88%A4%E6%96%AD.html

添加新回复

登录 后才能参与评论.

WooYun(白帽子技术社区)

网络安全资讯、讨论,跨站师,渗透师,结界师聚集之地

登录