高考问答王奉友的监狱生活:高分求助破解md5码！~~急！~~~~~~~~~~~
来源：百度文库 编辑：高考问答 时间：2024/04/28 09:17:18
用普通的32位md5码替换也不行！
求助高手解密！
2551d37e6a5127f16a4a89671cd7b2ab
是正版网站的源码，两年前买的，是那种安装版，重做了系统安装好后密码还原成以前的了，当时卖给我网站的公司没有了，官方网站那边不再提供给我密码，晕，上万元啊，急！~~~~~~~~~~~
要是有办法修改源码也行，将源码里面修改成不是用md5源码，谢谢！
你能找到添加管理员的页面么？只要避开登陆认证就行，刚才的努力也是为了得到认证。
我觉的现在的方法就是1。修改相关管理登陆，避开密码认证
2。避开登陆认证，即打开管理页面时取消cookie的限制
MD5如果你有用过的话，当然如果知道一些生成原理的话是最好的。
MD5在生成之前是使用四组的八个字符串连接的，如果生成的时候打乱了这个顺序，就不会符合标准的MD5加密，但是唯一性我认为还是可以保证。这样就会导致生成的看似MD5的密文，其实可能已经是非真正的MD5了。还有，如果我连续MD5两次以上，这个密文就更难破了。
不知道你是什么东西的MD5？ 网站？还是某个软件？
我刚才去破了一下，也是没有破出来，用些弱口令看看能不能饶过管理
用常见的若口令'or'='or' ，帐号和密码都是这个，在想想网站上有没有以前留下的后门什么的吧
这个MD5真的很难破啊，有个在线破解的www.XMD5.ORG
binfred ：
你好，我是gamemai,谢谢你的回答，刚才我看了源码中action指向logon.asp
以下是logon.asp的源码：
<!--#include virtual="/inc/rm.asp"-->
<%
Session.TimeOut = 60
%>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<meta name="GENERATOR" content="Microsoft FrontPage 4.0">
<meta name="ProgId" content="FrontPage.Editor.Document">
<%
Dim UserManager
Set UserManager = Server.CreateObject("EasyContentSE.UserManager")
UserManager.Init "user_users","UserManager"
Dim username
Dim password
Dim Role
Dim objUser
username = request("username")
password = Request("password")
On Error Resume Next
call UserManager.Login(username,password,Session.SessionID,Request.ServerVariables("Remote_Addr"))
If Err.Number=0 Then
Response.Cookies("LogonUserName") = username
%>
<script language="Javascript">
function LoadiTOMCMS() {
window.location="EasyContent.asp";
}
</script>
<%
Else
%>
<script language="javascript">
function LoadiTOMCMS()
{
alert("<%=rm.GetString("passerror") & "," & Err.Description%>");
window.location="Default.asp";
}
</script>
<%
End If
%>
</head>
<body onLoad="LoadiTOMCMS();">
</body>
</html>
里面没有你说的md5
我搜索整个网站里面也没有md5.asp文件，请问我应该怎么做？
====================================================================
下面是其他相关几个程序的源码：
1、EasyContent.asp
<!--#include virtual="/inc/UserManager.asp" -->
<!--#include virtual="/inc/rm.asp"-->
<script LANGUAGE="JavaScript" SRC="Inc/cookie.js">
</script>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<link rel="stylesheet" type="text/css" href="inc/cms.css">
<meta name="GENERATOR" content="Microsoft FrontPage 4.0">
<meta name="ProgId" content="FrontPage.Editor.Document">
<title><%=rm.GetString("easycontent")%> <%=rm.GetString("cms")%></title>
</head>
<body topmargin="0" leftmargin="0" oncontextmenu="return false">
<fieldset>
<div id="topToolBar">
<table width="100%"><tr><td><%=rm.GetString("easycontent")%> <%=rm.GetString("cms")%></td><td align="right"><a href="logout.asp"><img border="0" src="images/exit.gif">退出登录</a></td></tr></table>
</div>
</fieldset>
<iframe id="WorkArea" style="width: 100%; height: 50%;margin-top:2;" src="ecFrame.asp"></iframe>
<script>
function fixSize() {
document.all.WorkArea.style.height = Math.max(document.body.clientHeight - document.all.WorkArea.offsetTop, 0);
}
window.status="当前用户：<%=CurrentLoginUser%>";
window.onresize=fixSize;
fixSize();
</script>
</body>
</html>
2、UserManager.asp
<%
dim LOGCATA_ERROR,LOGCATA_INFO,LOGCATA_WARNING,LOGTYPE_CONTENT,LOGTYPE_FILE,LOGTYPE_SYSTEM
LOGCATA_ERROR = 1
LOGCATA_INFO = 2
LOGCATA_WARNING = 3
LOGTYPE_CONTENT = 1
LOGTYPE_FILE = 2
LOGTYPE_SYSTEM = 3
Dim SysLog
Set SysLog = Server.CreateObject("EasyContentSE.SysLog")
Dim UserManager,CurrentLoginUser,CurrentLoginUserObject
Set UserManager = Server.CreateObject("EasyContentSE.UserManager")
UserManager.Init "user_users","UserManager"
On Error Resume Next
Set CurrentLoginUserObject = UserManager.GetCurrentUser(Session.SessionID)
If Err.Number<>0 Then
Response.Write "<script language='javascript'>alert('登录已经过期，请重新登录！" & Err.Description & "');"
Response.Write "top.navigate('/default.asp');"
Response.Write "</script>"
Response.End
End If
CurrentLoginUser = CurrentLoginUserObject.UserName
On Error goto 0
%>
3、RM.asp
<%
Dim RM
If Not IsObject(Session("ResourceManager")) Then
Set RM = Server.CreateObject("RM.ResourceManager")
RM.Init Request.ServerVariables("HTTP_ACCEPT_LANGUAGE"),Server.Mappath("/resource")
Set Session("ResourceManager")=RM
Else
Set RM = Session("ResourceManager")
End If
Response.ContentType="text/html;charset=" & RM.GetCharset
%>
4、cookie.js
function WriteValue(name,value,expiry){
var expDate = new Date();
var oneMinute = 60*1000;
if (expiry){
}
else{
expiry = 60*24*365;
}
expDate.setTime(expDate.getTime()+expiry*oneMinute);
document.cookie = name + "=" + escape(value) + ";expires=" + expDate.toGMTString() + ";path=/";
}
function ReadValue(CookieName){
var CookieString = document.cookie;
var CookieSet = CookieString.split (';');
var SetSize = CookieSet.length;
var CookiePieces
var ReturnValue = "";
var x = 0;
for (x = 0; ((x < SetSize) && (ReturnValue == "")); x++) {
CookiePieces = CookieSet[x].split ('=');
if (CookiePieces[0].substring (0,1) == ' ') {
CookiePieces[0] = CookiePieces[0].substring (1, CookiePieces[0].length);
}
if (CookiePieces[0] == CookieName) {
ReturnValue = CookiePieces[1];
}
}
return(ReturnValue);
}
===================================================================
将logon.asp中的call UserManager.Login(username,password,Session.SessionID,Request.ServerVariables改为call UserManager.Login(username,Session.SessionID,Request.ServerVariables，覆盖上传，然后再登陆试试，不用打密码
============================================================
提示该参数是必选项，我将源码中的Dim password删除还是不行
将logon.asp中的call UserManager.Login(username,password,Session.SessionID,Request.ServerVariables改为call UserManager.Login(username,Session.SessionID,Request.ServerVariables，覆盖上传，然后再登陆试试，不用打密码
============================================================
提示该参数是必选项，我将源码中的Dim password删除还是不行
============================================================
下面是登陆页面default.asp的源码
<html>
<head>
<title>后台管理系统</title>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<script language="javascript">
function userfriendly(){
if (document.form1.username.value=="")
document.form1.username.focus();
else
document.form1.password.focus();
}
</script>
<style type="text/css">
<!--
.0-px12 {
font-size: 12px;
line-height: 18px;
text-decoration: none;
}
-->
</style>
<%
Dim userName
userName = Request.Cookies("LogonUserName")
%>
</head>
<body onLoad="window.setTimeout('userfriendly()',500);" bgcolor="#FFFFFF" text="#000000" leftmargin="0" topmargin="0" marginwidth="0" marginheight="0" >
<table width="100%" border="0" cellspacing="0" cellpadding="0" height="100%">
<tr>
<td>
<div align="center">
<table width="680" border="0" cellspacing="0" cellpadding="0" height="420" align="center">
<tr>
<td height="3">
<table width="100%" border="0" cellspacing="0" cellpadding="0" background="images\lin_tbg.gif" height="3">
<tr>
<td><img src="images\lin_tl.gif" width="3" height="3"></td>
<td>
<div align="right"><img src="images\lin_tr.gif" width="4" height="3"></div>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td>
<table width="100%" border="0" cellspacing="0" cellpadding="0" height="413">
<tr>
<td width="3" background="images\lin_lbg.gif"></td>
<td bgcolor="#CCCCCC" valign="top">
<table width="660" border="0" cellspacing="0" cellpadding="0" height="10" align="center">
<tr>
<td></td>
</tr>
</table>
<table width="660" border="0" cellspacing="0" cellpadding="0" height="200" align="center" background="images\t_bg.jpg">
<tr>
<td valign="top"><table width="664" border="0" cellspacing="0" cellpadding="0">
<tr>
<td><IMG SRC="images/0_01.jpg" WIDTH=664 HEIGHT=23 ALT=""></td>
</tr>
</table>
<table width="664" border="0" cellpadding="0" cellspacing="0" background="images/0_bg.jpg">
<tr>
<td width="26"><IMG SRC="images/0_02.jpg" WIDTH=26 HEIGHT=208 ALT=""></td>
<td width="66" valign="top"><IMG SRC="images/0_03.jpg" WIDTH=66 HEIGHT=65 ALT=""></td>
<td width="324" valign="top"> <table width="100%" height="169" border="0" cellpadding="0" cellspacing="0">
<tr>
<td height="65"><IMG SRC="images/0_04.jpg" WIDTH=224 HEIGHT=65 ALT=""></td>
</tr>
<tr>
<td><table width="100%" border="0" cellpadding="0" cellspacing="4" class="0-px12">
<form name="form1" method="post" action="logon.asp">
<tr>
<td width="80" align="right" class="white">用户名：</td>
<td> <input type="text" name="username" value="<%=userName%>" class="0-px12" size=40>
</td>
</tr>
<tr>
<td align="right" class="white">密码：</td>
<td> <input type="password" name="password" class="0-px12" size=40>
</td>
</tr>
<tr>
<td> </td>
<td align="right"><font color="#FFFFFF"><input type="image" src="images/0_12.jpg" width="71" height="33"></font></td>
</tr>
</form>
</table></td>
</tr>
</table></td>
<td width="90" valign="bottom" class="0-px12"> </td>
<td width="135" align="right" valign="bottom" class="0-px12"> </td>
<td width="23"><img SRC="images/0_06.jpg" WIDTH=23 HEIGHT=208 ALT=""></td>
</tr>
</table>
<table width="664" border="0" cellspacing="0" cellpadding="0">
<tr>
<td><IMG SRC="images/0_11.jpg" WIDTH=664 HEIGHT=15 ALT=""></td>
</tr>
</table></td>
</tr>
</table>
<table width="660" border="0" cellspacing="0" cellpadding="0" height="6" align="center">
<tr>
<td></td>
</tr>
</table>
<table width="660" border="0" cellspacing="0" cellpadding="0" height="1" align="center" bgcolor="#999999">
<tr>
<td></td>
</tr>
</table>
<table width="660" border="0" cellspacing="0" cellpadding="0" height="6" align="center">
<tr>
<td></td>
</tr>
</table>
<table width="660" border="0" cellspacing="0" cellpadding="0" height="160" align="center">
<tr>
<td></td>
</tr>
</table>
<table width="660" border="0" cellspacing="0" cellpadding="0" height="22" align="center">
</table>
</td>
<td width="4" background="images\lin_rbg.gif"></td>
</tr>
</table>
</td>
</tr>
<tr>
<td height="4">
<table width="100%" border="0" cellspacing="0" cellpadding="0" background="images\lin_bbg.gif" height="4">
<tr>
<td><img src="images\lin_bl.gif" width="3" height="4"></td>
<td>
<div align="right"><img src="images\lin_br.gif" width="4" height="4"></div>
</td>
</tr>
</table>
</td>
</tr>
</table>
</div>
</td>
</tr>
</table>
</body>
</html>