\u6211\u4eec\u4e5f\u53ef\u4ee5\u5728Windows\u5e73\u53f0\u4e0a\u8fd0\u884cJohn the Ripper\u6765\u7834\u89e3Windows\u53e3\u4ee4\u3002\u4f46\u662f\uff0c\u4e3a\u4e86\u8fdb\u884c\u53e3\u4ee4\u7834\u89e3\uff0c\u5fc5\u987b\u9996\u5148\u8fd0\u884c\u4e00\u4e2a\u5de5\u5177\uff0c\u5c06Windows\u53e3\u4ee4\u4eceSAM\u6587\u4ef6\u4e2d\u63d0\u53d6\u51fa\u6765\uff0c\u505a\u8fd9\u4e00\u6b65\u5de5\u4f5c\u7684\u539f\u56e0\u5728\u4e8eWindows\u8fd0\u884c\u8fc7\u7a0b\u4e2dSAM\u88ab\u9501\u5b9a\uff0c\u4e0d\u80fd\u76f4\u63a5\u590d\u5236\u6216\u7f16\u8f91\u8fd9\u4e2a\u6587\u4ef6\u3002Pwdump 6\u662f\u4e00\u4e2a\u514d\u8d39\u7684Windows\u5b9e\u7528\u7a0b\u5e8f\uff0c\u5b83\u80fd\u591f\u63d0\u53d6\u51faWindows\u7cfb\u7edf\u4e2d\u7684\u53e3\u4ee4\uff0c\u5e76\u5b58\u50a8\u5728\u6307\u5b9a\u7684\u6587\u4ef6\u4e2d\u3002Pwdump 6\u662fPwdump3e\u7684\u6539\u8fdb\u7248\uff0c\u8be5\u7a0b\u5e8f\u80fd\u591f\u4eceWindows\u76ee\u6807\u4e2d\u63d0\u53d6\u51faNTLM\u548cLanMan\u53e3\u4ee4\u6563\u5217\u503c\uff0c\u800c\u4e0d\u7ba1\u662f\u5426\u542f\u7528\u4e86Syskey\uff08\u8fd9\u662f\u4e00\u4e2aWindows\u8d26\u6237\u6570\u636e\u5e93\u52a0\u5bc6\u5de5\u5177\uff0c\u662fWindows\u4e0b\u7684\u4e00\u6761\u547d\u4ee4\uff09\u3002<\/p>\n
\u4e0b\u8f7d\u94fe\u63a5\uff1ahttp:\/\/down.\/data\/149269<\/p>\n
>>\u53bb\u7f51\u7edc\u5b89\u5168\u5de5\u5177\u767e\u5b9d\u7bb1\u770b\u770b\u5176\u5b83\u5b89\u5168\u5de5\u5177<\/strong><\/span><\/span><\/p>\n Pwdump6\u7684\u4f7f\u7528\u8bed\u6cd5\u4e3a\uff1a<\/p>\n \u5176\u4e2d\uff1a<\/p>\n machineName\u2014\u2014\u76ee\u6807\u8ba1\u7b97\u673a\u540d\u79f0\u3002<\/p>\n -h\u2014\u2014\u663e\u793a\u672c\u7a0b\u5e8f\u7684\u7528\u6cd5\u3002<\/p>\n -o\u2014\u2014\u6307\u5b9a\u5bfc\u51fa\u540e\u7684\u53e3\u4ee4\u6563\u5217\u503c\u7684\u5b58\u50a8\u6587\u4ef6\u3002<\/p>\n -u\u2014\u2014\u6307\u5b9a\u7528\u4e8e\u8fde\u63a5\u76ee\u6807\u7684\u7528\u6237\u540d\u3002<\/p>\n -p\u2014\u2014\u6307\u5b9a\u7528\u4e8e\u8fde\u63a5\u76ee\u6807\u7684\u53e3\u4ee4\u3002<\/p>\n -s\u2014\u2014\u6307\u5b9a\u8fde\u63a5\u4e0a\u4f7f\u7528\u7684\u5171\u4eab\uff0c\u800c\u4e0d\u662f\u641c\u7d22\u5171\u4eab\u3002<\/p>\n -n\u2014\u2014\u8df3\u8fc7\u53e3\u4ee4\u5386\u53f2\u3002<\/p>\n \u4e0b\u9762\u7684\u793a\u4f8b\u8bbf\u95ee\u8ba1\u7b97\u673aaa-zcf\uff0c\u5bfc\u51fa\u5b83\u7684\u53e3\u4ee4\u6563\u5217\u503c\u5230\u6587\u4ef6passwd.1\u4e2d\u3002<\/p>\n \u793a\u4f8b\uff1a\u5bfc\u51fa\u8ba1\u7b97\u673aaa-zcf\u4e0a\u7684Windows\u53e3\u4ee4\u3002<\/p>\n \u6267\u884c\u4e0b\u8ff0\u547d\u4ee4\uff1a<\/p>\n \u73b0\u5728\u6211\u4eec\u53ef\u4ee5\u8fd0\u884cJohn the Ripper\u6765\u7834\u89e3passwd.1\u6587\u4ef6\u4e2d\u7528\u6237\u7684\u53e3\u4ee4\u4e86\u3002<\/p>\n \u793a\u4f8b\uff1a\u7834\u89e3Windows\u53e3\u4ee4\u3002<\/p>\n \u6267\u884c\u4e0b\u8ff0\u547d\u4ee4\uff1a<\/p>\n \u8bf7\u6ce8\u610f\uff0cuser1\u7684\u53e3\u4ee4\u88ab\u5212\u5206\u4e3a\u4e24\u90e8\u5206\u3002\u8fd9\u662fLANMAN\u53e3\u4ee4\u6563\u5217\u7684\u7279\u70b9\uff0c\u5b83\u4e00\u6b21\u4ec5\u5141\u8bb8\u52a0\u5bc67\u4e2a\u53e3\u4ee4\u3002\u7531\u4e8eLANMAN\u53e3\u4ee4\u6563\u5217\u5c06\u6240\u6709\u53e3\u4ee4\u90fd\u8f6c\u6362\u4e3a\u5927\u5199\uff0c\u56e0\u6b64John the Ripper\u4ee5\u5927\u5199\u5f62\u5f0f\u8868\u8fbe\u6240\u6709\u53e3\u4ee4\u3002<\/p>\n \u4f7f\u7528show\u5f00\u5173\uff0c\u53ef\u4ee5\u770b\u5230user1\u7834\u89e3\u540e\u7684\u53e3\u4ee4\uff0c\u5982\u793a\u4f8b8-6\u6240\u793a\u3002<\/p>\n \u793a\u4f8b\uff1a\u663e\u793a\u7834\u89e3\u540e\u7684Windows\u53e3\u4ee4\u3002<\/p>\n \u56e0\u6b64user1\u7684\u53e3\u4ee4\u4e3aCOMPUTER\u3002<\/p>\n","protected":false},"excerpt":{"rendered":" \u6211\u4eec\u4e5f\u53ef\u4ee5\u5728Windows\u5e73\u53f0\u4e0a\u8fd0\u884cJohn the Ripper\u6765\u7834\u89e3Windows\u53e3\u4ee4\u3002\u4f46\u662f\uff0c\u4e3a\u4e86\u8fdb\u884c\u53e3\u4ee4 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[202645],"tags":[],"class_list":["post-301382","post","type-post","status-publish","format-standard","hentry","category-202645"],"_links":{"self":[{"href":"https:\/\/idc.net\/help\/wp-json\/wp\/v2\/posts\/301382","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/idc.net\/help\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/idc.net\/help\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/idc.net\/help\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/idc.net\/help\/wp-json\/wp\/v2\/comments?post=301382"}],"version-history":[{"count":0,"href":"https:\/\/idc.net\/help\/wp-json\/wp\/v2\/posts\/301382\/revisions"}],"wp:attachment":[{"href":"https:\/\/idc.net\/help\/wp-json\/wp\/v2\/media?parent=301382"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/idc.net\/help\/wp-json\/wp\/v2\/categories?post=301382"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/idc.net\/help\/wp-json\/wp\/v2\/tags?post=301382"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}\r\npwdump [-h][-o][-u][-p][-n] machineName<\/pre>\n
\r\nG:\\OpenSource\\pwdump6-1.4.3\\PwDumpRelease>PwDump -o
passwd.1 aa-zcf
pwdump6 Version 1.4.3 by fizzgig and the mighty
group at foofus.net Copyright 2006 foofus.net
This program is free software under the GNU
General Public License Version 2 (GNU GPL),
you can redistribute it and\/or modify it under the
terms of the GNU GPL, as published by the Free
Software Foundation. NO WARRANTY, EXPRESSED OR
IMPLIED, IS GRANTED WITH THIS PROGRAM. Please see
the COPYING file included with this program and the
GNU GPL for further details.
Using pipe {2A553ABC-A93F-4E50-BB05-0386335F70C1}
Key length is 16
Completed.<\/pre>\n\r\nG:\\OpenSource\\john171w\\john1701\\run\\ john-386 passwd.1
Loaded 10 passwords with no different salts (NT LM DES [32\/32 BS])
COMPUTE (user1:1)
R (user1:2)<\/pre>\n\r\nG:\\OpenSource\\john171w\\john1701\\run\\ john-386 -show
user1:COMPUTER:1009:2B2AC2D1C7C8FDA6CEA80B5FAD7563AA:::<\/pre>\n