Discuz background password encryption hash cracking

Discuz password is widely recognized as a pain point
 
This program uses collision cracking
 
Load Dictionary (extracted from various databases)
 
 
 
<? Php
Error_reporting (0 );
If ($ argc <2 ){
Print_r ('
---------------------------------------------------------------- +
Usage: php '. $ argv [0].' hash
Example:
Php '. $ argv [0].' cd1a0b2de38cc1d7d796b1d2ba6a954f: dc2bce
---------------------------------------------------------------- +
');
Die;
}
$ Fd = fopen ("1.txt"," rb ");
 
If (! $ Fd)
{
Echo "[!] Error: www.2cto.com opening dictionary file error ";
Die;
}
 
Echo "\ n [+] cracking ...";
Echo "\ r ";
 
While ($ buf = trim (fgets ($ fd )))
{
// Echo $ buf. "\ r \ n ";
$ Hash = $ argv [1];
$ Hash2 = substr ($ hash, 0, 32 );
$ Salt = substr ($ hash, 33,6 );
$ Tmp = md5 (md5 ($ buf). $ salt );
 
$ Conn = strcmp ($ tmp, $ hash2 );
If ($ conn = 0)
{
 
Echo "[+] Password cracked \ n". "[+] Password:". $ buf. "\ r \ n ";
Die;
}
 
}
 
If ($ conn! = 0)
{
Echo "your dictionary is not powerful! Expand the dictionary quickly:) \ r \ n ";
}
Fclose ($ fd );
?>

From WebShell's Blog