Home Database Mysql Tutorial 数据库密码的破解(以破解MySQL数据库为例)实验

数据库密码的破解(以破解MySQL数据库为例)实验

Jun 07, 2016 pm 05:28 PM

1、常见的数据库类型包括 微软的SQLServer 、MySql、IBM的DB2、Oracle 2、DBPwAudit数据库密码破解工具 1) 功能:通过挂载字典对

1、常见的数据库类型包括 微软的SQLServer 、MySql、IBM的DB2、Oracle

2、DBPwAudit数据库密码破解工具

1) 功能:通过挂载字典对目标数据库进行密码暴力猜解,目前支持的数据库包括SQLServer、MySQL、Oracle、DB2

2) DBPwAudit的安装:

图1、上传实验用到的软件包

wps_clip_image-12096

注释:#crunch 密码字典生成工具

#mysql-cennector-java 密码破解工具需要的驱动(注意:数据库类型不同,,驱动不同)

#dbpwaudit 数据库密码破解主程序

 

图2、解压dbpwaudit压缩包

[root@attack ~]# unzip dbpwaudit_0_8.zip

wps_clip_image-7597

 

3)数据库密码dbpwaudit的使用格式

注意:首先将*.jar驱动复制到 /root/DBPwAudit/jdbc 目录中

DBPwAudit -s -d -D -U -P [options]

-s - Server name or address. #指定数据库ip地址

-p - Port of database server/instance. #指定数据库服务器端口

-d - Database/Instancename to audit. #指定数据库名

-D - Thealiasof the driver to use (-Lforaliases) #指定数据库类型(Oracle,MySQL,MSSql,DB2)

-U - File containing usernames to guess. #用户字典文件

-P - File containing passwords to guess. #密码字典文件

-L - List driver aliases. #列出所支持的数据库驱动别名

-L

Oracle - oracle.jdbc.driver.OracleDriver

MySQL - com.mysql.jdbc.Driver

MSSql - com.microsoft.sqlserver.jdbc.SQLServerDriver

DB2 - com.ibm.db2.jcc.DB2Driver

 

4)使用方法1、破解SQLServer数据库

#./dbpwaudit.sh -s IP -d master(数据库名) -D mssql(数据库类型) -U username(字典) -P password(字典)

使用方法2、破解MySql数据库

#./dbpwaudit.sh -s IP -d mysql(数据库名称) -D MySQL(数据库类型) -U username(字典) -P password(字典)

注意:驱动是需要手动导入的。需要创建自己破解字典

 

5)、解压mysql数据库驱动软件包

[root@attack ~]# tar -zxvf mysql-connector-java-5.1.24.tar.gz

 

6)、手动将驱动*.jar复制到 “jdbc”目录中

[root@attack ~]# cp mysql-connector-java-5.1.24/mysql-connector-java-5.1.24-bin.jar DBPwAudit/jdbc/

 

3、crunch生成密码字典文件

 

1)、crunch用途:字典生成工具

 

2)、工具特点:

· 使用排列组合的方式生成字典文件

· 可以通过行数或文件的大小中断生成过程

· 支持生成数字和符号结合的字典文件

· 支持区分大小写字母

· 当生成多个文件时增加一个状态报告

 

3)、工具更多信息及下载:

 

4)、crunch工具的安装

 

图1、解压crunch工具的压缩包

[root@attack ~]# tar -xvf crunch-3.4.tgz

 

图2、make编译

[root@attack ~]# cd crunch-3.4

[root@localhost crunch-3.4]# make

Building binary...

/usr/bin/gcc -pthread -Wall -pedantic -std=c99 crunch.c -lm -o crunch

 

图3、make install安装

[root@localhost crunch-3.4]# make install

 

5)、crunch使用格式

目录:/pentest/passwords/crunch/

用法1:#./crunch 密码最短位数 最大位数 密码的可能性 -o 生成密码字典

#./crunch 5 5 1234567890 -o pass1.dic

用法2:#./crunch 最短位数 最大位数 charset.lst(策略集) 使用的策略 -o 生成密码字典

#./crunch 6 8 charset.lst mixalpha-numeric-all-space -o pass2.dic

linux

Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn

Hot AI Tools

Undresser.AI Undress

Undresser.AI Undress

AI-powered app for creating realistic nude photos

AI Clothes Remover

AI Clothes Remover

Online AI tool for removing clothes from photos.

Undress AI Tool

Undress AI Tool

Undress images for free

Clothoff.io

Clothoff.io

AI clothes remover

AI Hentai Generator

AI Hentai Generator

Generate AI Hentai for free.

Hot Article

R.E.P.O. Energy Crystals Explained and What They Do (Yellow Crystal)
1 months ago By 尊渡假赌尊渡假赌尊渡假赌
R.E.P.O. Best Graphic Settings
1 months ago By 尊渡假赌尊渡假赌尊渡假赌
Will R.E.P.O. Have Crossplay?
1 months ago By 尊渡假赌尊渡假赌尊渡假赌

Hot Tools

Notepad++7.3.1

Notepad++7.3.1

Easy-to-use and free code editor

SublimeText3 Chinese version

SublimeText3 Chinese version

Chinese version, very easy to use

Zend Studio 13.0.1

Zend Studio 13.0.1

Powerful PHP integrated development environment

Dreamweaver CS6

Dreamweaver CS6

Visual web development tools

SublimeText3 Mac version

SublimeText3 Mac version

God-level code editing software (SublimeText3)

Explain InnoDB Full-Text Search capabilities. Explain InnoDB Full-Text Search capabilities. Apr 02, 2025 pm 06:09 PM

InnoDB's full-text search capabilities are very powerful, which can significantly improve database query efficiency and ability to process large amounts of text data. 1) InnoDB implements full-text search through inverted indexing, supporting basic and advanced search queries. 2) Use MATCH and AGAINST keywords to search, support Boolean mode and phrase search. 3) Optimization methods include using word segmentation technology, periodic rebuilding of indexes and adjusting cache size to improve performance and accuracy.

How do you alter a table in MySQL using the ALTER TABLE statement? How do you alter a table in MySQL using the ALTER TABLE statement? Mar 19, 2025 pm 03:51 PM

The article discusses using MySQL's ALTER TABLE statement to modify tables, including adding/dropping columns, renaming tables/columns, and changing column data types.

When might a full table scan be faster than using an index in MySQL? When might a full table scan be faster than using an index in MySQL? Apr 09, 2025 am 12:05 AM

Full table scanning may be faster in MySQL than using indexes. Specific cases include: 1) the data volume is small; 2) when the query returns a large amount of data; 3) when the index column is not highly selective; 4) when the complex query. By analyzing query plans, optimizing indexes, avoiding over-index and regularly maintaining tables, you can make the best choices in practical applications.

Can I install mysql on Windows 7 Can I install mysql on Windows 7 Apr 08, 2025 pm 03:21 PM

Yes, MySQL can be installed on Windows 7, and although Microsoft has stopped supporting Windows 7, MySQL is still compatible with it. However, the following points should be noted during the installation process: Download the MySQL installer for Windows. Select the appropriate version of MySQL (community or enterprise). Select the appropriate installation directory and character set during the installation process. Set the root user password and keep it properly. Connect to the database for testing. Note the compatibility and security issues on Windows 7, and it is recommended to upgrade to a supported operating system.

How do I configure SSL/TLS encryption for MySQL connections? How do I configure SSL/TLS encryption for MySQL connections? Mar 18, 2025 pm 12:01 PM

Article discusses configuring SSL/TLS encryption for MySQL, including certificate generation and verification. Main issue is using self-signed certificates' security implications.[Character count: 159]

What are some popular MySQL GUI tools (e.g., MySQL Workbench, phpMyAdmin)? What are some popular MySQL GUI tools (e.g., MySQL Workbench, phpMyAdmin)? Mar 21, 2025 pm 06:28 PM

Article discusses popular MySQL GUI tools like MySQL Workbench and phpMyAdmin, comparing their features and suitability for beginners and advanced users.[159 characters]

Difference between clustered index and non-clustered index (secondary index) in InnoDB. Difference between clustered index and non-clustered index (secondary index) in InnoDB. Apr 02, 2025 pm 06:25 PM

The difference between clustered index and non-clustered index is: 1. Clustered index stores data rows in the index structure, which is suitable for querying by primary key and range. 2. The non-clustered index stores index key values ​​and pointers to data rows, and is suitable for non-primary key column queries.

How do you handle large datasets in MySQL? How do you handle large datasets in MySQL? Mar 21, 2025 pm 12:15 PM

Article discusses strategies for handling large datasets in MySQL, including partitioning, sharding, indexing, and query optimization.

See all articles