search
HomeDatabaseMysql Tutorial数据库密码的破解(以破解MySQL数据库为例)实验

1、常见的数据库类型包括 微软的SQLServer 、MySql、IBM的DB2、Oracle 2、DBPwAudit数据库密码破解工具 1) 功能:通过挂载字典对

1、常见的数据库类型包括 微软的SQLServer 、MySql、IBM的DB2、Oracle

2、DBPwAudit数据库密码破解工具

1) 功能:通过挂载字典对目标数据库进行密码暴力猜解,目前支持的数据库包括SQLServer、MySQL、Oracle、DB2

2) DBPwAudit的安装:

图1、上传实验用到的软件包

wps_clip_image-12096

注释:#crunch 密码字典生成工具

#mysql-cennector-java 密码破解工具需要的驱动(注意:数据库类型不同,,驱动不同)

#dbpwaudit 数据库密码破解主程序

 

图2、解压dbpwaudit压缩包

[root@attack ~]# unzip dbpwaudit_0_8.zip

wps_clip_image-7597

 

3)数据库密码dbpwaudit的使用格式

注意:首先将*.jar驱动复制到 /root/DBPwAudit/jdbc 目录中

DBPwAudit -s -d -D -U -P [options]

-s - Server name or address. #指定数据库ip地址

-p - Port of database server/instance. #指定数据库服务器端口

-d - Database/Instancename to audit. #指定数据库名

-D - Thealiasof the driver to use (-Lforaliases) #指定数据库类型(Oracle,MySQL,MSSql,DB2)

-U - File containing usernames to guess. #用户字典文件

-P - File containing passwords to guess. #密码字典文件

-L - List driver aliases. #列出所支持的数据库驱动别名

-L

Oracle - oracle.jdbc.driver.OracleDriver

MySQL - com.mysql.jdbc.Driver

MSSql - com.microsoft.sqlserver.jdbc.SQLServerDriver

DB2 - com.ibm.db2.jcc.DB2Driver

 

4)使用方法1、破解SQLServer数据库

#./dbpwaudit.sh -s IP -d master(数据库名) -D mssql(数据库类型) -U username(字典) -P password(字典)

使用方法2、破解MySql数据库

#./dbpwaudit.sh -s IP -d mysql(数据库名称) -D MySQL(数据库类型) -U username(字典) -P password(字典)

注意:驱动是需要手动导入的。需要创建自己破解字典

 

5)、解压mysql数据库驱动软件包

[root@attack ~]# tar -zxvf mysql-connector-java-5.1.24.tar.gz

 

6)、手动将驱动*.jar复制到 “jdbc”目录中

[root@attack ~]# cp mysql-connector-java-5.1.24/mysql-connector-java-5.1.24-bin.jar DBPwAudit/jdbc/

 

3、crunch生成密码字典文件

 

1)、crunch用途:字典生成工具

 

2)、工具特点:

· 使用排列组合的方式生成字典文件

· 可以通过行数或文件的大小中断生成过程

· 支持生成数字和符号结合的字典文件

· 支持区分大小写字母

· 当生成多个文件时增加一个状态报告

 

3)、工具更多信息及下载:

 

4)、crunch工具的安装

 

图1、解压crunch工具的压缩包

[root@attack ~]# tar -xvf crunch-3.4.tgz

 

图2、make编译

[root@attack ~]# cd crunch-3.4

[root@localhost crunch-3.4]# make

Building binary...

/usr/bin/gcc -pthread -Wall -pedantic -std=c99 crunch.c -lm -o crunch

 

图3、make install安装

[root@localhost crunch-3.4]# make install

 

5)、crunch使用格式

目录:/pentest/passwords/crunch/

用法1:#./crunch 密码最短位数 最大位数 密码的可能性 -o 生成密码字典

#./crunch 5 5 1234567890 -o pass1.dic

用法2:#./crunch 最短位数 最大位数 charset.lst(策略集) 使用的策略 -o 生成密码字典

#./crunch 6 8 charset.lst mixalpha-numeric-all-space -o pass2.dic

linux

Statement
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
MySQL's Role: Databases in Web ApplicationsMySQL's Role: Databases in Web ApplicationsApr 17, 2025 am 12:23 AM

The main role of MySQL in web applications is to store and manage data. 1.MySQL efficiently processes user information, product catalogs, transaction records and other data. 2. Through SQL query, developers can extract information from the database to generate dynamic content. 3.MySQL works based on the client-server model to ensure acceptable query speed.

MySQL: Building Your First DatabaseMySQL: Building Your First DatabaseApr 17, 2025 am 12:22 AM

The steps to build a MySQL database include: 1. Create a database and table, 2. Insert data, and 3. Conduct queries. First, use the CREATEDATABASE and CREATETABLE statements to create the database and table, then use the INSERTINTO statement to insert the data, and finally use the SELECT statement to query the data.

MySQL: A Beginner-Friendly Approach to Data StorageMySQL: A Beginner-Friendly Approach to Data StorageApr 17, 2025 am 12:21 AM

MySQL is suitable for beginners because it is easy to use and powerful. 1.MySQL is a relational database, and uses SQL for CRUD operations. 2. It is simple to install and requires the root user password to be configured. 3. Use INSERT, UPDATE, DELETE, and SELECT to perform data operations. 4. ORDERBY, WHERE and JOIN can be used for complex queries. 5. Debugging requires checking the syntax and use EXPLAIN to analyze the query. 6. Optimization suggestions include using indexes, choosing the right data type and good programming habits.

Is MySQL Beginner-Friendly? Assessing the Learning CurveIs MySQL Beginner-Friendly? Assessing the Learning CurveApr 17, 2025 am 12:19 AM

MySQL is suitable for beginners because: 1) easy to install and configure, 2) rich learning resources, 3) intuitive SQL syntax, 4) powerful tool support. Nevertheless, beginners need to overcome challenges such as database design, query optimization, security management, and data backup.

Is SQL a Programming Language? Clarifying the TerminologyIs SQL a Programming Language? Clarifying the TerminologyApr 17, 2025 am 12:17 AM

Yes,SQLisaprogramminglanguagespecializedfordatamanagement.1)It'sdeclarative,focusingonwhattoachieveratherthanhow.2)SQLisessentialforquerying,inserting,updating,anddeletingdatainrelationaldatabases.3)Whileuser-friendly,itrequiresoptimizationtoavoidper

Explain the ACID properties (Atomicity, Consistency, Isolation, Durability).Explain the ACID properties (Atomicity, Consistency, Isolation, Durability).Apr 16, 2025 am 12:20 AM

ACID attributes include atomicity, consistency, isolation and durability, and are the cornerstone of database design. 1. Atomicity ensures that the transaction is either completely successful or completely failed. 2. Consistency ensures that the database remains consistent before and after a transaction. 3. Isolation ensures that transactions do not interfere with each other. 4. Persistence ensures that data is permanently saved after transaction submission.

MySQL: Database Management System vs. Programming LanguageMySQL: Database Management System vs. Programming LanguageApr 16, 2025 am 12:19 AM

MySQL is not only a database management system (DBMS) but also closely related to programming languages. 1) As a DBMS, MySQL is used to store, organize and retrieve data, and optimizing indexes can improve query performance. 2) Combining SQL with programming languages, embedded in Python, using ORM tools such as SQLAlchemy can simplify operations. 3) Performance optimization includes indexing, querying, caching, library and table division and transaction management.

MySQL: Managing Data with SQL CommandsMySQL: Managing Data with SQL CommandsApr 16, 2025 am 12:19 AM

MySQL uses SQL commands to manage data. 1. Basic commands include SELECT, INSERT, UPDATE and DELETE. 2. Advanced usage involves JOIN, subquery and aggregate functions. 3. Common errors include syntax, logic and performance issues. 4. Optimization tips include using indexes, avoiding SELECT* and using LIMIT.

See all articles

Hot AI Tools

Undresser.AI Undress

Undresser.AI Undress

AI-powered app for creating realistic nude photos

AI Clothes Remover

AI Clothes Remover

Online AI tool for removing clothes from photos.

Undress AI Tool

Undress AI Tool

Undress images for free

Clothoff.io

Clothoff.io

AI clothes remover

AI Hentai Generator

AI Hentai Generator

Generate AI Hentai for free.

Hot Article

R.E.P.O. Energy Crystals Explained and What They Do (Yellow Crystal)
1 months agoBy尊渡假赌尊渡假赌尊渡假赌
R.E.P.O. Best Graphic Settings
1 months agoBy尊渡假赌尊渡假赌尊渡假赌
R.E.P.O. How to Fix Audio if You Can't Hear Anyone
1 months agoBy尊渡假赌尊渡假赌尊渡假赌
R.E.P.O. Chat Commands and How to Use Them
1 months agoBy尊渡假赌尊渡假赌尊渡假赌

Hot Tools

PhpStorm Mac version

PhpStorm Mac version

The latest (2018.2.1) professional PHP integrated development tool

Zend Studio 13.0.1

Zend Studio 13.0.1

Powerful PHP integrated development environment

EditPlus Chinese cracked version

EditPlus Chinese cracked version

Small size, syntax highlighting, does not support code prompt function

SublimeText3 English version

SublimeText3 English version

Recommended: Win version, supports code prompts!

SAP NetWeaver Server Adapter for Eclipse

SAP NetWeaver Server Adapter for Eclipse

Integrate Eclipse with SAP NetWeaver application server.