1、常见的数据库类型包括 微软的SQLServer 、MySql、IBM的DB2、Oracle 2、DBPwAudit数据库密码破解工具 1) 功能:通过挂载字典对
1、常见的数据库类型包括 微软的SQLServer 、MySql、IBM的DB2、Oracle
2、DBPwAudit数据库密码破解工具
1) 功能:通过挂载字典对目标数据库进行密码暴力猜解,目前支持的数据库包括SQLServer、MySQL、Oracle、DB2
2) DBPwAudit的安装:
图1、上传实验用到的软件包
注释:#crunch 密码字典生成工具
#mysql-cennector-java 密码破解工具需要的驱动(注意:数据库类型不同,,驱动不同)
#dbpwaudit 数据库密码破解主程序
图2、解压dbpwaudit压缩包
[root@attack ~]# unzip dbpwaudit_0_8.zip
3)数据库密码dbpwaudit的使用格式
注意:首先将*.jar驱动复制到 /root/DBPwAudit/jdbc 目录中
DBPwAudit -s
-s - Server name or address. #指定数据库ip地址
-p - Port of database server/instance. #指定数据库服务器端口
-d - Database/Instancename to audit. #指定数据库名
-D - Thealiasof the driver to use (-Lforaliases) #指定数据库类型(Oracle,MySQL,MSSql,DB2)
-U - File containing usernames to guess. #用户字典文件
-P - File containing passwords to guess. #密码字典文件
-L - List driver aliases. #列出所支持的数据库驱动别名
-L
Oracle - oracle.jdbc.driver.OracleDriver
MySQL - com.mysql.jdbc.Driver
MSSql - com.microsoft.sqlserver.jdbc.SQLServerDriver
DB2 - com.ibm.db2.jcc.DB2Driver
4)使用方法1、破解SQLServer数据库
#./dbpwaudit.sh -s IP -d master(数据库名) -D mssql(数据库类型) -U username(字典) -P password(字典)
使用方法2、破解MySql数据库
#./dbpwaudit.sh -s IP -d mysql(数据库名称) -D MySQL(数据库类型) -U username(字典) -P password(字典)
注意:驱动是需要手动导入的。需要创建自己破解字典
5)、解压mysql数据库驱动软件包
[root@attack ~]# tar -zxvf mysql-connector-java-5.1.24.tar.gz
6)、手动将驱动*.jar复制到 “jdbc”目录中
[root@attack ~]# cp mysql-connector-java-5.1.24/mysql-connector-java-5.1.24-bin.jar DBPwAudit/jdbc/
3、crunch生成密码字典文件
1)、crunch用途:字典生成工具
2)、工具特点:
· 使用排列组合的方式生成字典文件
· 可以通过行数或文件的大小中断生成过程
· 支持生成数字和符号结合的字典文件
· 支持区分大小写字母
· 当生成多个文件时增加一个状态报告
3)、工具更多信息及下载:
4)、crunch工具的安装
图1、解压crunch工具的压缩包
[root@attack ~]# tar -xvf crunch-3.4.tgz
图2、make编译
[root@attack ~]# cd crunch-3.4
[root@localhost crunch-3.4]# make
Building binary...
/usr/bin/gcc -pthread -Wall -pedantic -std=c99 crunch.c -lm -o crunch
图3、make install安装
[root@localhost crunch-3.4]# make install
5)、crunch使用格式
目录:/pentest/passwords/crunch/
用法1:#./crunch 密码最短位数 最大位数 密码的可能性 -o 生成密码字典
#./crunch 5 5 1234567890 -o pass1.dic
用法2:#./crunch 最短位数 最大位数 charset.lst(策略集) 使用的策略 -o 生成密码字典
#./crunch 6 8 charset.lst mixalpha-numeric-all-space -o pass2.dic

This article explores optimizing MySQL memory usage in Docker. It discusses monitoring techniques (Docker stats, Performance Schema, external tools) and configuration strategies. These include Docker memory limits, swapping, and cgroups, alongside

This article addresses MySQL's "unable to open shared library" error. The issue stems from MySQL's inability to locate necessary shared libraries (.so/.dll files). Solutions involve verifying library installation via the system's package m

The article discusses using MySQL's ALTER TABLE statement to modify tables, including adding/dropping columns, renaming tables/columns, and changing column data types.

This article compares installing MySQL on Linux directly versus using Podman containers, with/without phpMyAdmin. It details installation steps for each method, emphasizing Podman's advantages in isolation, portability, and reproducibility, but also

This article provides a comprehensive overview of SQLite, a self-contained, serverless relational database. It details SQLite's advantages (simplicity, portability, ease of use) and disadvantages (concurrency limitations, scalability challenges). C

This guide demonstrates installing and managing multiple MySQL versions on macOS using Homebrew. It emphasizes using Homebrew to isolate installations, preventing conflicts. The article details installation, starting/stopping services, and best pra

Article discusses configuring SSL/TLS encryption for MySQL, including certificate generation and verification. Main issue is using self-signed certificates' security implications.[Character count: 159]

Article discusses popular MySQL GUI tools like MySQL Workbench and phpMyAdmin, comparing their features and suitability for beginners and advanced users.[159 characters]


Hot AI Tools

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Undress AI Tool
Undress images for free

Clothoff.io
AI clothes remover

AI Hentai Generator
Generate AI Hentai for free.

Hot Article

Hot Tools

EditPlus Chinese cracked version
Small size, syntax highlighting, does not support code prompt function

Dreamweaver Mac version
Visual web development tools

ZendStudio 13.5.1 Mac
Powerful PHP integrated development environment

SublimeText3 Mac version
God-level code editing software (SublimeText3)

mPDF
mPDF is a PHP library that can generate PDF files from UTF-8 encoded HTML. The original author, Ian Back, wrote mPDF to output PDF files "on the fly" from his website and handle different languages. It is slower than original scripts like HTML2FPDF and produces larger files when using Unicode fonts, but supports CSS styles etc. and has a lot of enhancements. Supports almost all languages, including RTL (Arabic and Hebrew) and CJK (Chinese, Japanese and Korean). Supports nested block-level elements (such as P, DIV),
