加密解密

加密解密

在线平台

Codepen

CryptoJS Example

TIO

Try It OnlineTry It Online

加密

/bin/bash$:openssl passwd -1 
Password: 
Verifying - Password: 
$1$OqkIgSn9$RICLnQmaYA8pW66qWrHhq0

echo "abc" | md5sum               
# 输出
0bee89b07a248e27c83fc3d5951213c1  - # -!=密码

AES加密解密（需要crypto-js库）

var CryptoJS = require("crypto-js");

// Encrypt
var ciphertext = CryptoJS.AES.encrypt('my message', 'secret key 123').toString();

// Decrypt
var bytes  = CryptoJS.AES.decrypt(ciphertext, 'secret key 123');
var originalText = bytes.toString(CryptoJS.enc.Utf8);

console.log(originalText); // 'my message'

解密

BASE64解密

echo "TG92ZUBsaWxseQ==" | base64 -d
# 输出
Love@lilly% # %!=密码

AES加密解密（需要crypto-js库）

var CryptoJS = require("crypto-js");

// Encrypt 加密
var ciphertext = CryptoJS.AES.encrypt('my message', 'secret key 123').toString();

// Decrypt 解密
var bytes  = CryptoJS.AES.decrypt(ciphertext, 'secret key 123');
var originalText = bytes.toString(CryptoJS.enc.Utf8);

console.log(originalText); // 'my message'

hash类型识别

> hash-identifier "59284aa85709ddaf3bd246030060f6a2"

Possible Hashs:
[+] MD5
[+] Domain Cached Credentials - MD4(MD4(($pass)).(strtolower($username)))

密码字典

/usr/share/seclists/Discovery/Web-Content/burp-parameter-names.txt burp。专业版参数名称字典，包含web应用程序会用到的参数名称

Kali自带的密码字典在 /usr/share/wordlists

密码字典：https://github.com/fuzz-security/SuperWordlist

https://github.com/fuzz-security/SuperWordlistgithub.com

针对目标网页生成对应字典

cewl http://10.10.10.1 -w dict.txt