web安全学习笔记【09】——算法2

#知识点：

1、Web常规-系统&中间件&数据库&源码等

2、Web其他-前后端&软件&Docker&分配站等

3、Web拓展-CDN&WAF&OSS&反向&负载均衡等

-----------------------------------

1、APP架构-封装&原生态&H5&flutter等

2、小程序架构-Web&H5&JS&VUE框架等

-----------------------------------

1、渗透命令-常规命令&文件上传下载

2、反弹Shell-防火墙策略&正反向连接

3、数据回显-查询带外&网络协议层级

-----------------------------------

1、抓包技术-HTTP/S-Web&APP&小程序&PC应用等

2、抓包工具-Burp&Fidder&Charles&Proxifier

-----------------------------------

1、抓包技术-全局-APP&小程序&PC应用

2、抓包工具-Wireshark&科来分析&封包

-----------------------------------

1、存储密码加密-应用对象

2、传输加密编码-发送回显

3、数据传输格式-统一格式

4、代码特性混淆-开发语言

-----------------------------------

1、单向散列加密 -MD5，HASH

2、对称加密 -AES DES

3、非对称加密 -RSA

4、解密-识别&需求&寻找(前后端)&操作

#章节点

应用架构：Web/APP/云应用/小程序/负载均衡等

安全产品：CDN/WAF/IDS/IPS/蜜罐/防火墙/杀毒等

渗透命令：文件上传下载/端口服务/Shell反弹等

抓包技术：HTTP/TCP/UDP/ICMP/DNS/封包/代理等

算法加密：数据编码/密码算法/密码保护/反编译/加壳等

//PHP7.3加密演示代码块

<?php

//aes

namespace vendor;

class EncryptionTool{

??? public static function enAES($originTxt, $key): string{

??????? return base64_encode(openssl_encrypt($originTxt, 'AES-128-ECB',$key, OPENSSL_RAW_DATA));

??? }

??? public static function deAES($originTxt, $key): string{

??????? $data = base64_decode($originTxt);

??????? return openssl_decrypt($data,'AES-128-ECB',$key, OPENSSL_RAW_DATA);

??? }

???

}

//des

class DES

{

??? /**

???? * @var string $method 加解密方法，可通过 openssl_get_cipher_methods() 获得

???? */

??? protected $method;

??? /**

???? * @var string $key 加解密的密钥

???? */

??? protected $key;

??? /**

???? * @var string $output 输出格式 无、base64、hex

???? */

??? protected $output;

??? /**

???? * @var string $iv 加解密的向量

???? */

??? protected $iv;

??? /**

???? * @var string $options

???? */

??? protected $options;

??? // output 的类型

??? const OUTPUT_NULL = '';

??? const OUTPUT_BASE64 = 'base64';

??? const OUTPUT_HEX = 'hex';

??? /**

???? * DES constructor.

???? * @param string $key

???? * @param string $method

???? *????? ECB DES-ECB、DES-EDE3 （为 ECB 模式时，$iv 为空即可）

???? *????? CBC DES-CBC、DES-EDE3-CBC、DESX-CBC

???? *????? CFB DES-CFB8、DES-EDE3-CFB8

???? *????? CTR

???? *????? OFB

???? *

???? * @param string $output

???? *????? base64、hex

???? *

???? * @param string $iv

???? * @param int $options

???? */

??? public function __construct($key, $method = 'DES-ECB', $output = '', $iv = '', $options = OPENSSL_RAW_DATA | OPENSSL_NO_PADDING)

??? {

??????? $this->key = $key;

??????? $this->method = $method;

??????? $this->output = $output;

??????? $this->iv = $iv;

??????? $this->options = $options;

??? }

??? /**

???? * 加密

???? *

???? * @param $str

???? * @return string

???? */

??? public function encrypt($str)

??? {

??????? $str = $this->pkcsPadding($str, 8);

??????? $sign = openssl_encrypt($str, $this->method, $this->key, $this->options, $this->iv);

??????? if ($this->output == self::OUTPUT_BASE64) {

??????????? $sign = base64_encode($sign);

??????? } else if ($this->output == self::OUTPUT_HEX) {

??????????? $sign = bin2hex($sign);

??????? }

??????? return $sign;

??? }

??? /**

???? * 解密

???? *

???? * @param $encrypted

???? * @return string

???? */

??? public function decrypt($encrypted)

??? {

??????? if ($this->output == self::OUTPUT_BASE64) {

??????????? $encrypted = base64_decode($encrypted);

??????? } else if ($this->output == self::OUTPUT_HEX) {

??????????? $encrypted = hex2bin($encrypted);

??????? }

??????? $sign = @openssl_decrypt($encrypted, $this->method, $this->key, $this->options, $this->iv);

??????? $sign = $this->unPkcsPadding($sign);

??????? $sign = rtrim($sign);

??????? return $sign;

??? }

??? /**

???? * 填充

???? *

???? * @param $str

???? * @param $blocksize

???? * @return string

???? */

??? private function pkcsPadding($str, $blocksize)

??? {

??????? $pad = $blocksize - (strlen($str) % $blocksize);

??????? return $str . str_repeat(chr($pad), $pad);

??? }

??? /**

???? * 去填充

???? *

???? * @param $str

???? * @return string

???? */

??? private function unPkcsPadding($str)

??? {

??????? $pad = ord($str{strlen($str) - 1});

??????? if ($pad > strlen($str)) {

??????????? return false;

??????? }

??????? return substr($str, 0, -1 * $pad);

??? }

}

//rsa

define('RSA_PUBLIC', '-----BEGIN PUBLIC KEY-----

MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCmkANmC849IOntYQQdSgLvMMGm

8V/u838ATHaoZwvweoYyd+/7Wx+bx5bdktJb46YbqS1vz3VRdXsyJIWhpNcmtKhY

inwcl83aLtzJeKsznppqMyAIseaKIeAm6tT8uttNkr2zOymL/PbMpByTQeEFlyy1

poLBwrol0F4USc+owwIDAQAB

-----END PUBLIC KEY-----');

define('RSA_PRIVATE','-----BEGIN PRIVATE KEY-----

MIICdgIBADANBgkqhkiG9w0BAQEFAASCAmAwggJcAgEAAoGBAKaQA2YLzj0g6e1h

BB1KAu8wwabxX+7zfwBMdqhnC/B6hjJ37/tbH5vHlt2S0lvjphupLW/PdVF1ezIk

haGk1ya0qFiKfByXzdou3Ml4qzOemmozIAix5ooh4Cbq1Py6202SvbM7KYv89syk

HJNB4QWXLLWmgsHCuiXQXhRJz6jDAgMBAAECgYAIF5cSriAm+CJlVgFNKvtZg5Tk

93UhttLEwPJC3D7IQCuk6A7Qt2yhtOCvgyKVNEotrdp3RCz++CY0GXIkmE2bj7i0

fv5vT3kWvO9nImGhTBH6QlFDxc9+p3ukwsonnCshkSV9gmH5NB/yFoH1m8tck2Gm

BXDj+bBGUoKGWtQ7gQJBANR/jd5ZKf6unLsgpFUS/kNBgUa+EhVg2tfr9OMioWDv

MSqzG/sARQ2AbO00ytpkbAKxxKkObPYsn47MWsf5970CQQDIqRiGmCY5QDAaejW4

HbOcsSovoxTqu1scGc3Qd6GYvLHujKDoubZdXCVOYQUMEnCD5j7kdNxPbVzdzXll

9+p/AkEAu/34iXwCbgEWQWp4V5dNAD0kXGxs3SLpmNpztLn/YR1bNvZry5wKew5h

z1zEFX+AGsYgQJu1g/goVJGvwnj/VQJAOe6f9xPsTTEb8jkAU2S323BG1rQFsPNg

jY9hnWM8k2U/FbkiJ66eWPvmhWd7Vo3oUBxkYf7fMEtJuXu+JdNarwJAAwJK0YmO

LxP4U+gTrj7y/j/feArDqBukSngcDFnAKu1hsc68FJ/vT5iOC6S7YpRJkp8egj5o

pCcWaTO3GgC5Kg==

-----END PRIVATE KEY-----');

$password='xiaodisec';

//md5

echo "原始数据:$password". "<br/>";

echo "MD5加密后:".md5($password). "<hr/>";

//base64

echo "原始数据:$password". "<br/>";

echo "BASE64编码后:".base64_encode($password). "<hr/>";

//aes

echo "原始数据: " . $password . "<br/>";

$data = EncryptionTool::enAES($password, "1234567891234567");

echo "AES加密后: " . $data . "<hr/>";

//echo "解密后: " . EncryptionTool::deAES($data, "1234567891234567") . "<br/>";

//des

echo "原始数据:$password". "<br/>";

$key = 'key123456';

$iv = 'iv123456';

// DES CBC 加解密

echo 'DES CBC 加解密:';

$des = new DES($key, 'DES-CBC', DES::OUTPUT_BASE64, $iv);

echo $base64Sign = $des->encrypt($password);

echo "<br>";

//echo $des->decrypt($base64Sign);

echo "<hr>";

// DES ECB 加解密

echo "原始数据:$password". "<br/>";

echo 'DES ECB 加解密:';

$des = new DES($key, 'DES-ECB', DES::OUTPUT_BASE64);

echo $base64Sign = $des->encrypt($password);

echo "<hr>";

//echo $des->decrypt($base64Sign);

//rsa

//公钥加密

$public_key = openssl_pkey_get_public(RSA_PUBLIC);

if(!$public_key){

??? die('公钥不可用');

}

//第一个参数是待加密的数据只能是string，第二个参数是加密后的数据,第三个参数是openssl_pkey_get_public返回的资源类型,第四个参数是填充方式

$return_en = openssl_public_encrypt($password, $crypted, $public_key);

if(!$return_en){

??? return('加密失败,请检查RSA秘钥');

}

$eb64_cry = base64_encode($crypted);

echo "RSA公钥加密数据：".$eb64_cry;

echo "<br>";

//私钥解密

$private_key = openssl_pkey_get_private(RSA_PRIVATE);

if(!$private_key){

??? die('私钥不可用');

}

$return_de = openssl_private_decrypt(base64_decode($eb64_cry), $decrypted, $private_key);

if(!$return_de){

??? return('解密失败,请检查RSA秘钥');

}

echo "RSA私钥解密数据:".$decrypted;

echo "<hr>";

//私钥加密

$private_key = openssl_pkey_get_private(RSA_PRIVATE);

if(!$private_key){

??? die('私钥不可用');

}

$return_en = openssl_private_encrypt($password, $crypted, $private_key);

if(!$return_en){

??? return('加密失败,请检查RSA秘钥');

}

$eb64_cry = base64_encode($crypted);

echo "RSA私钥加密数据".$eb64_cry;

echo "<br>";

//公钥解密

$public_key = openssl_pkey_get_public(RSA_PUBLIC);

if(!$public_key){

??? die('公钥不可用');

}

$return_de = openssl_public_decrypt(base64_decode($eb64_cry), $decrypted, $public_key);

if(!$return_de){

??? return('解密失败,请检查RSA秘钥');

}

echo "RSA公钥解密数据:".$decrypted;

echo "<hr>";

?>