[英]C# NTLM Hash Calculator
我最近開始學習C#。 我嘗試用這種語言生成一個NTLM哈希,但我找不到一個函數來為我做這個。 在python 3.x中,我將導入hashlib
並使用hashlib.new("md4", "Hello, World!".encode("utf-16le"))
計算它hashlib.new("md4", "Hello, World!".encode("utf-16le"))
。
我在C#中搜索對象瀏覽器但沒有找到任何內容,最接近的是Windows NTLM身份驗證類。 我還搜索了微軟的文檔,發現了哈希計算器,但僅限於sha1和md5。
有沒有辦法在C#中計算NTLM哈希? 你能告訴我一個如何做的例子,我更喜歡一個簡短的方法來保持簡單。
謝謝。
您可以使用Reflection為CN4調用CNG來創建對現有加密提供程序的擴展(某些.Net應該可以做或者更容易):
namespace System.Security.Cryptography {
[System.Runtime.InteropServices.ComVisible(true)]
public abstract class MD4 : HashAlgorithm {
static MD4() {
CryptoConfig.AddAlgorithm(typeof(MD4CryptoServiceProvider), "System.Security.Cryptography.MD4");
}
protected MD4() {
HashSizeValue = 128;
}
new static public MD4 Create() {
return Create("System.Security.Cryptography.MD4");
}
new static public MD4 Create(string algName) {
return (MD4)CryptoConfig.CreateFromName(algName);
}
}
[System.Runtime.InteropServices.ComVisible(true)]
public sealed class MD4CryptoServiceProvider : MD4 {
internal static class Utils {
internal static Type UtilsType = Type.GetType("System.Security.Cryptography.Utils");
public static T InvokeInternalMethodOfType<T>(object o, object pType, string methodName, params object[] args) {
var internalType = (pType is string internalTypeName) ? Type.GetType(internalTypeName) : (Type)pType;
var internalMethods = internalType.GetMethods(BindingFlags.NonPublic | BindingFlags.FlattenHierarchy | (o == null ? BindingFlags.Static : 0));
var internalMethod = internalMethods.Where(m => m.Name == methodName && m.GetParameters().Length == args.Length).Single();
return (T)internalMethod?.Invoke(o, args);
}
public static T GetInternalPropertyValueOfInternalType<T>(object o, object pType, string propertyName) {
var internalType = (pType is string internalTypeName) ? Type.GetType(internalTypeName) : (Type)pType;
var internalProperty = internalType.GetProperty(propertyName, BindingFlags.NonPublic | (o == null ? BindingFlags.Static : 0));
return (T)internalProperty.GetValue(o);
}
internal static SafeHandle CreateHash(int algid) {
return InvokeInternalMethodOfType<SafeHandle>(null, UtilsType, "CreateHash", GetInternalPropertyValueOfInternalType<object>(null, UtilsType, "StaticProvHandle"), algid);
}
internal static void HashData(SafeHandle h, byte[] data, int ibStart, int cbSize) {
InvokeInternalMethodOfType<object>(null, UtilsType, "HashData", h, data, ibStart, cbSize);
}
internal static byte[] EndHash(SafeHandle h) {
return InvokeInternalMethodOfType<byte[]>(null, UtilsType, "EndHash", h);
}
}
internal const int ALG_CLASS_HASH = (4 << 13);
internal const int ALG_TYPE_ANY = (0);
internal const int ALG_SID_MD4 = 2;
internal const int CALG_MD4 = (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_MD4);
[System.Security.SecurityCritical]
private SafeHandle _safeHashHandle = null;
[System.Security.SecuritySafeCritical]
public MD4CryptoServiceProvider() {
if (CryptoConfig.AllowOnlyFipsAlgorithms)
throw new InvalidOperationException("Cryptography_NonCompliantFIPSAlgorithm");
Contract.EndContractBlock();
// cheat with Reflection
_safeHashHandle = Utils.CreateHash(CALG_MD4);
}
protected override void Dispose(bool disposing) {
if (_safeHashHandle != null && !_safeHashHandle.IsClosed)
_safeHashHandle.Dispose();
base.Dispose(disposing);
}
public override void Initialize() {
if (_safeHashHandle != null && !_safeHashHandle.IsClosed)
_safeHashHandle.Dispose();
_safeHashHandle = Utils.CreateHash(CALG_MD4);
}
protected override void HashCore(byte[] rgb, int ibStart, int cbSize) {
Utils.HashData(_safeHashHandle, rgb, ibStart, cbSize);
}
protected override byte[] HashFinal() {
return Utils.EndHash(_safeHashHandle);
}
}
}
一旦你完成了這個,一些幫助擴展將讓你輕松使用它(我修改它來創建一個單例,所以它不必每次使用時都做反射/創建工作):
static class Ext {
public static HashAlgorithm MD4Singleton;
static Ext() {
MD4Singleton = System.Security.Cryptography.MD4.Create();
}
public static byte[] MD4(this string s) {
return MD4Singleton.ComputeHash(System.Text.Encoding.Unicode.GetBytes(s));
}
public static string AsHexString(this byte[] bytes) {
return String.Join("", bytes.Select(h => h.ToString("X2")));
}
}
現在,您只需在某些示例數據上調用擴展方法:
void Main() {
var input = "testing";
var hash = input.MD4();
var hashStr = hash.AsHexString();
Console.WriteLine(hashStr);
}
我認為你需要使用BouncyCastle來計算HASH,有一個非常好的.net移植。
以下是計算NTLM哈希的所有步驟: https : //asecuritysite.com/encryption/lmhash
代碼可以在帖子的末尾找到。 它使用BC作為MD4,因為大多數MD4實現都有一種方法可以使用弱密鑰。 NTLM不會考慮弱密鑰,因此如果出現密鑰,您必須能夠使用它們。
https://markgamache.blogspot.com/2013/01/ntlm-challenge-response-is-100-broken.html
根據上面接受的答案,這是為CNG調用任何有效ALG_ID
的一般解決方案。 謝謝NetMage!
public class HashByID : HashAlgorithm {
static readonly Dictionary<int, int> hashSizes = new Dictionary<int,int>() { {0x8001,128},{0x8002,128},{0x8003,128},{0x8004,160},{0x8006,128},{0x8007,160},{0x800c,256},{0x800d,384},{0x800e,512}};
static readonly Type hUtils;
static readonly SafeHandle hStaticProv;
static readonly Func<SafeHandle, int, SafeHandle> fCreate;
static readonly Action<SafeHandle, byte[], int, int> fHash;
static readonly Func<SafeHandle, byte[]> fHashEnd;
public static bool inited;
public readonly int algID;
SafeHandle hh = null;
static HashByID() {
try {
hUtils = Type.GetType("System.Security.Cryptography.Utils");
hStaticProv = (SafeHandle)hUtils.GetProperty("StaticProvHandle", BindingFlags.NonPublic | BindingFlags.Static).GetValue(null, null);
fCreate = (Func<SafeHandle, int, SafeHandle>)hUtils.GetMethods(BindingFlags.NonPublic | BindingFlags.Static).Where(x => x.Name == "CreateHash" && x.GetParameters().Length == 2).Single().CreateDelegate(null, typeof(SafeHandle), typeof(int), typeof(SafeHandle));
fHash = (Action<SafeHandle, byte[], int, int>)hUtils.GetMethods(BindingFlags.NonPublic | BindingFlags.Static).Where(x => x.Name == "HashData" && x.GetParameters().Length == 4).Single().CreateDelegate(null, typeof(SafeHandle), typeof(byte[]), typeof(int), typeof(int));
fHashEnd = (Func<SafeHandle, byte[]>)hUtils.GetMethods(BindingFlags.NonPublic | BindingFlags.Static).Where(x => x.Name == "EndHash" && x.GetParameters().Length == 1).Single().CreateDelegate(null, typeof(SafeHandle), typeof(byte[]));
inited = true;
} catch { }
}
public HashByID(int algID) {
if (algID == 0x8009) algID = 0x8004; //map CALG_HMAC -> CALG_SHA1
this.algID = algID;
hashSizes.TryGetValue(algID, out HashSizeValue);
Initialize();
}
protected override void Dispose(bool disposing) {
if (hh != null && !hh.IsClosed) hh.Dispose();
base.Dispose(disposing);
}
public override void Initialize() {
if (hh != null && !hh.IsClosed) hh.Dispose();
hh = fCreate(hStaticProv, algID);
}
protected override void HashCore(byte[] data, int ofs, int len) {
fHash(hh, data, ofs, len);
}
protected override byte[] HashFinal() {
return fHashEnd(hh);
}
}
//Delegate creation helper
public static Delegate CreateDelegate(this MethodInfo methodInfo, object target, params Type[] custTypes) {
Func<Type[], Type> getType;
bool isAction = methodInfo.ReturnType.Equals((typeof(void))), cust = custTypes.Length > 0;
Type[] types = cust ? custTypes : methodInfo.GetParameters().Select(p => p.ParameterType).ToArray();
if (isAction) getType = Expression.GetActionType;
else {
getType = Expression.GetFuncType;
if (!cust) types = types.Concat(new[] { methodInfo.ReturnType }).ToArray();
}
if (cust) {
int i, nargs = types.Length - (isAction ? 0 : 1);
var dm = new DynamicMethod(methodInfo.Name, isAction ? typeof(void) : types.Last(), types.Take(nargs).ToArray(), typeof(object), true);
var il = dm.GetILGenerator();
for (i = 0; i < nargs; i++)
il.Emit(OpCodes.Ldarg_S, i);
il.Emit(OpCodes.Call, methodInfo);
il.Emit(OpCodes.Ret);
if (methodInfo.IsStatic) return dm.CreateDelegate(getType(types));
return dm.CreateDelegate(getType(types), target);
}
if (methodInfo.IsStatic) return Delegate.CreateDelegate(getType(types), methodInfo);
return Delegate.CreateDelegate(getType(types), target, methodInfo.Name);
}
為MD4創建一個algID = 0x8002
的實例。
聲明:本站的技術帖子網頁,遵循CC BY-SA 4.0協議,如果您需要轉載,請注明本站網址或者原文地址。任何問題請咨詢:yoyou2525@163.com.