Awesome
spring-ENC | sprint encode (plan text) get enc password
参考链接:
How to encrypt user passwords
http://www.jasypt.org/howtoencryptuserpasswords.html
0x00简介
Jasypt代表Java简化加密,它提供纯文本,数字和二进制文件的基本加密以保护机密数据,它是完全线程安全的,并且在多处理器中也提供高性能。
Jasypt提供了更简单的加密和解密文本的方法,并且不需要任何深入的加密知识即可开始使用它,简单地,输入要加密的纯文本,Jasypt将完成其余的计算并为您这种加密是单向加密,它还提供了两种加密机制。
在实施双向加密时,除了提供纯文本之外,您还需要提供秘密文本,并且该秘密文本可用于解密加密的文本。
默认情况下,Jasypt使用PBEWithMD5AndDES加密算法,但它也提供选择其他更强加密选项的选项,例如PBEWithMD5AndTripleDES
application.yml
spring:
application:
name: argus
version: 2.0
data:
elasticsearch: #ElasticsearchProperties
cluster-name: idss-es #默认即为elasticsearch
datasource:
url: jdbc:mysql://x.x.x.x:3306/test?autoReconnect=true&useUnicode=true&characterEncoding=utf-8&allowMultiQueries=true
driver-class-name: com.mysql.jdbc.Driver
username: ENC(vpIBjT3RT8mf6pBjiKJuqA==) root
password: ENC(xxxxxxxxxxxxx==)
# User, Password encryptor salt
jasypt:
encryptor:
password: EbfYkitulv73I2p0mXI50JMXoaxZTKJ7
how to decode get plan text?
下面免费的Jasypt在线加密和解密工具提供了一种方法以及两种(简单)加密和解密选项,还提供了比较纯文本和Jasypt加密密码的选项。
username: ENC(vpIBjT3RT8mf6pBjiKJuqA==)
# User, Password encryptor salt
password: EbfYkitulv73I2p0mXI50JMXoaxZTKJ7
online decode for spring enc
https://www.devglan.com/online-tools/jasypt-online-encryption-decryption
username: ENC(vpIBjT3RT8mf6pBjiKJuqA==)
to username: root
java 代码解密
使用方法:
$ java -jar jasyptDecrypt.jar
_ _____ _ _____ _
| | | __ \| | | __ \ | |
| | __ _ ___ _ _| |__) | |_| | | | ___ ___ _ __ _ _ _ __ | |_
_ | |/ _` / __| | | | ___/| __| | | |/ _ \/ __| '__| | | | '_ \| __|
| |__| | (_| \__ \ |_| | | | |_| |__| | __/ (__| | | |_| | |_) | |_
\____/ \__,_|___/\__, |_| \__|_____/ \___|\___|_| \__, | .__/ \__|
__/ | __/ | |
|___/ |___/|_|
Usage:
[*] java -jar jasyptDecrypt.jar decode password EncodeText
[*] java -jar jasyptDecrypt.jar encode password Text
加密
$ java -jar jasyptDecrypt.jar encode EbfYkitulv73I2p0mXI50JMXoaxZTKJ7 root
_ _____ _ _____ _
| | | __ \| | | __ \ | |
| | __ _ ___ _ _| |__) | |_| | | | ___ ___ _ __ _ _ _ __ | |_
_ | |/ _` / __| | | | ___/| __| | | |/ _ \/ __| '__| | | | '_ \| __|
| |__| | (_| \__ \ |_| | | | |_| |__| | __/ (__| | | |_| | |_) | |_
\____/ \__,_|___/\__, |_| \__|_____/ \___|\___|_| \__, | .__/ \__|
__/ | __/ | |
|___/ |___/|_|
Usage:
[*] java -jar jasyptDecrypt.jar decode password EncodeText
[*] java -jar jasyptDecrypt.jar encode password Text
[-] Encrypt:
root >>> O9NmYDaJLpJQ6wl2/3TVpg==
解密
$ java -jar jasyptDecrypt.jar decode EbfYkitulv73I2p0mXI50JMXoaxZTKJ7 vpIBjT3RT8mf6pBjiKJuqA==
_ _____ _ _____ _
| | | __ \| | | __ \ | |
| | __ _ ___ _ _| |__) | |_| | | | ___ ___ _ __ _ _ _ __ | |_
_ | |/ _` / __| | | | ___/| __| | | |/ _ \/ __| '__| | | | '_ \| __|
| |__| | (_| \__ \ |_| | | | |_| |__| | __/ (__| | | |_| | |_) | |_
\____/ \__,_|___/\__, |_| \__|_____/ \___|\___|_| \__, | .__/ \__|
__/ | __/ | |
|___/ |___/|_|
Usage:
[*] java -jar jasyptDecrypt.jar decode password EncodeText
[*] java -jar jasyptDecrypt.jar encode password Text
[-] Decrypt:
vpIBjT3RT8mf6pBjiKJuqA== >>> root