您的位置：首页 > 新闻资讯 > 腾讯技术

400秒远程攻破你的QQ密码 OICQ存在安全隐患

2025-10-16 20:44:02

腾讯技术

51期间，被公司要求研究OICQ的通讯协议，在对OICQ认证的分析过程中发现了一个严重的安全脆弱性隐患，导致可以的通过抓包，破解整个局域网内的OICQ密码。

　　分析发现，OICQ在登陆过程中，尽管没有密码被直接传送的过程，整个会话认证过程密码始终在客户本地和端保留。但由于在登陆成功后，器返回的一个可以反向解码的加密字符成为了最薄弱的安全环节。

　　根据这个问题，5月1日编写的测试程序在迅驰1.4G，768M的平台上。在最大400秒的时间内，仅仅通过对包的抓取，远程分析出了上另一台计算机任意8位的OICQ数字密码，具体效果可以查看我们网站上的动画演示:

　和腾讯OICQ传统安全问题相比，这个脆弱性隐患无需在受害人电脑安装任何软件，仅仅需要在自己的电脑上运行程序，既可以直接破解中其他用户的OICQ账号,窃听用户内容，造成个人隐私的泄漏。

　　此问题出现在OICQ2001以上的版本之中，使用这些版本的用户，建议您修改数字密码，采用更复杂的密码组合，避免可能的安全隐患。

最新软件

相关文章

最新游戏

本站推荐

换一个

大裁决手游iOS疯趣版下载

大裁决手游iOS疯趣版下载立即下载

热门文章

火爆手游

救救小企鹅
小汽车欧力洗车店
Idle Shop Manager(闲置商店经理)
魔哥电脑版安卓QQ登陆器
射手必须死
狗蛋神冒险

网站地图 / 京ICP备XXXXXX

Copyright © win7down资源站 All Rights Reserved

本站所有来自互联网，版权归原著所有。如有侵权，敬请来信告知我们将及时撤销。

健康游戏提示：抵制不良游戏，拒绝盗版游戏，注意自我保护，谨防受骗上当，适度游戏益脑，沉迷游戏伤身，合理安排时间，享受健康生活

基本文件流程错误 SQL 调试

/www/wwwroot/cms/web/public/index.php ( 1.08 KB )
/www/wwwroot/cms/web/vendor/autoload.php ( 0.73 KB )
/www/wwwroot/cms/web/vendor/composer/autoload_real.php ( 1.63 KB )
/www/wwwroot/cms/web/vendor/composer/platform_check.php ( 0.90 KB )
/www/wwwroot/cms/web/vendor/composer/ClassLoader.php ( 15.99 KB )
/www/wwwroot/cms/web/vendor/composer/autoload_static.php ( 4.79 KB )
/www/wwwroot/cms/web/vendor/topthink/think-helper/src/helper.php ( 8.34 KB )
/www/wwwroot/cms/web/vendor/topthink/think-validate/src/helper.php ( 2.19 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/helper.php ( 1.47 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/stubs/load_stubs.php ( 0.16 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/Exception.php ( 1.69 KB )
/www/wwwroot/cms/web/vendor/topthink/think-container/src/Facade.php ( 2.71 KB )
/www/wwwroot/cms/web/vendor/symfony/polyfill-mbstring/bootstrap.php ( 8.26 KB )
/www/wwwroot/cms/web/vendor/symfony/polyfill-mbstring/bootstrap80.php ( 9.78 KB )
/www/wwwroot/cms/web/vendor/symfony/var-dumper/Resources/functions/dump.php ( 0.99 KB )
/www/wwwroot/cms/web/vendor/topthink/think-dumper/src/helper.php ( 0.18 KB )
/www/wwwroot/cms/web/vendor/symfony/var-dumper/VarDumper.php ( 3.73 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/App.php ( 15.00 KB )
/www/wwwroot/cms/web/vendor/topthink/think-container/src/Container.php ( 15.76 KB )
/www/wwwroot/cms/web/vendor/psr/container/src/ContainerInterface.php ( 1.02 KB )
/www/wwwroot/cms/web/app/provider.php ( 0.26 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/Http.php ( 6.04 KB )
/www/wwwroot/cms/web/vendor/topthink/think-helper/src/helper/Str.php ( 7.29 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/Env.php ( 4.68 KB )
/www/wwwroot/cms/web/app/common.php ( 16.91 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/helper.php ( 18.78 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/Config.php ( 5.54 KB )
/www/wwwroot/cms/web/config/app.php ( 0.95 KB )
/www/wwwroot/cms/web/config/cache.php ( 0.78 KB )
/www/wwwroot/cms/web/config/console.php ( 0.23 KB )
/www/wwwroot/cms/web/config/cookie.php ( 0.56 KB )
/www/wwwroot/cms/web/config/database.php ( 3.35 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/facade/Env.php ( 1.67 KB )
/www/wwwroot/cms/web/config/filesystem.php ( 0.61 KB )
/www/wwwroot/cms/web/config/lang.php ( 0.91 KB )
/www/wwwroot/cms/web/config/log.php ( 1.35 KB )
/www/wwwroot/cms/web/config/middleware.php ( 0.19 KB )
/www/wwwroot/cms/web/config/route.php ( 1.80 KB )
/www/wwwroot/cms/web/config/session.php ( 0.57 KB )
/www/wwwroot/cms/web/config/themes.php ( 0.34 KB )
/www/wwwroot/cms/web/config/trace.php ( 0.34 KB )
/www/wwwroot/cms/web/config/view.php ( 0.82 KB )
/www/wwwroot/cms/web/app/event.php ( 0.25 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/Event.php ( 7.67 KB )
/www/wwwroot/cms/web/app/service.php ( 0.13 KB )
/www/wwwroot/cms/web/app/AppService.php ( 0.26 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/Service.php ( 1.64 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/Lang.php ( 7.35 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/lang/zh-cn.php ( 13.70 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/initializer/Error.php ( 3.31 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/initializer/RegisterService.php ( 1.33 KB )
/www/wwwroot/cms/web/vendor/services.php ( 0.14 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/service/PaginatorService.php ( 1.52 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/service/ValidateService.php ( 0.99 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/service/ModelService.php ( 1.75 KB )
/www/wwwroot/cms/web/vendor/topthink/think-trace/src/Service.php ( 0.77 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/Middleware.php ( 6.72 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/initializer/BootService.php ( 0.77 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/Paginator.php ( 11.86 KB )
/www/wwwroot/cms/web/vendor/topthink/think-validate/src/Validate.php ( 62.20 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/Model.php ( 22.55 KB )
/www/wwwroot/cms/web/vendor/topthink/think-helper/src/contract/Arrayable.php ( 0.09 KB )
/www/wwwroot/cms/web/vendor/topthink/think-helper/src/contract/Jsonable.php ( 0.13 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/model/contract/Modelable.php ( 0.09 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/model/concern/Attribute.php ( 20.55 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/model/concern/AutoWriteData.php ( 4.18 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/model/concern/Conversion.php ( 6.17 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/model/concern/DbConnect.php ( 5.08 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/model/concern/ModelEvent.php ( 2.33 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/model/concern/RelationShip.php ( 28.29 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/Db.php ( 2.88 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/DbManager.php ( 8.52 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/Log.php ( 6.28 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/Manager.php ( 3.92 KB )
/www/wwwroot/cms/web/vendor/psr/log/src/LoggerInterface.php ( 2.71 KB )
/www/wwwroot/cms/web/vendor/psr/log/src/LoggerTrait.php ( 2.69 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/Cache.php ( 4.92 KB )
/www/wwwroot/cms/web/vendor/psr/simple-cache/src/CacheInterface.php ( 4.71 KB )
/www/wwwroot/cms/web/vendor/topthink/think-helper/src/helper/Arr.php ( 16.63 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/cache/driver/File.php ( 7.84 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/cache/Driver.php ( 9.03 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/contract/CacheHandlerInterface.php ( 1.99 KB )
/www/wwwroot/cms/web/app/Request.php ( 0.09 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/Request.php ( 55.74 KB )
/www/wwwroot/cms/web/app/middleware.php ( 0.29 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/Pipeline.php ( 2.61 KB )
/www/wwwroot/cms/web/vendor/topthink/think-trace/src/TraceDebug.php ( 2.94 KB )
/www/wwwroot/cms/web/app/middleware/Website.php ( 0.93 KB )
/www/wwwroot/cms/web/app/model/Website.php ( 0.14 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/facade/Db.php ( 0.93 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/db/connector/Mysql.php ( 4.33 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/db/PDOConnection.php ( 52.26 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/db/Connection.php ( 8.39 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/db/ConnectionInterface.php ( 4.57 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/db/builder/Mysql.php ( 16.58 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/db/Builder.php ( 24.06 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/db/BaseBuilder.php ( 27.50 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/db/Query.php ( 13.35 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/db/BaseQuery.php ( 44.92 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/db/concern/TimeFieldQuery.php ( 7.43 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/db/concern/AggregateQuery.php ( 3.26 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/db/concern/ModelRelationQuery.php ( 19.80 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/db/concern/ParamsBind.php ( 3.66 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/db/concern/ResultOperation.php ( 7.01 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/db/concern/WhereQuery.php ( 19.37 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/db/concern/JoinAndViewQuery.php ( 7.11 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/db/concern/TableFieldInfo.php ( 2.63 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/db/concern/Transaction.php ( 2.77 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/log/driver/File.php ( 6.19 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/contract/LogHandlerInterface.php ( 0.86 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/log/Channel.php ( 3.88 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/event/LogRecord.php ( 0.86 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/Route.php ( 23.56 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/route/RuleName.php ( 5.34 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/route/Domain.php ( 1.25 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/route/RuleGroup.php ( 20.45 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/route/Rule.php ( 26.35 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/route/RuleItem.php ( 9.78 KB )
/www/wwwroot/cms/web/route/app.php ( 1.76 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/facade/Route.php ( 4.68 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/route/dispatch/Controller.php ( 3.75 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/route/Dispatch.php ( 10.54 KB )
/www/wwwroot/cms/web/app/controller/News.php ( 4.16 KB )
/www/wwwroot/cms/web/app/BaseController.php ( 11.62 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/View.php ( 4.39 KB )
/www/wwwroot/cms/web/app/model/CmsNews.php ( 0.35 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/model/type/DateTime.php ( 1.73 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/model/contract/Typeable.php ( 0.26 KB )
/www/wwwroot/cms/web/app/model/Classed.php ( 0.79 KB )
/www/wwwroot/cms/web/app/model/CmsNewsData.php ( 0.35 KB )
/www/wwwroot/cms/web/app/logic/NewsLogic.php ( 2.49 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/db/Raw.php ( 1.22 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/model/Collection.php ( 6.69 KB )
/www/wwwroot/cms/web/vendor/topthink/think-helper/src/Collection.php ( 16.47 KB )
/www/wwwroot/cms/web/vendor/topthink/think-orm/src/db/CacheItem.php ( 4.36 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/route/Url.php ( 14.07 KB )
/www/wwwroot/cms/web/vendor/topthink/think-view/src/Think.php ( 8.38 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/contract/TemplateHandlerInterface.php ( 1.60 KB )
/www/wwwroot/cms/web/vendor/topthink/think-template/src/Template.php ( 46.61 KB )
/www/wwwroot/cms/web/vendor/topthink/think-template/src/template/driver/File.php ( 2.41 KB )
/www/wwwroot/cms/web/vendor/topthink/think-template/src/template/contract/DriverInterface.php ( 0.86 KB )
/www/wwwroot/cms/web/runtime/temp/fca18b665ac0a8c676e90be41be279a7.php ( 10.39 KB )
/www/wwwroot/cms/web/app/model/CmsConfig.php ( 0.35 KB )
/www/wwwroot/cms/web/app/model/CmsSoft.php ( 0.34 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/cache/TagSet.php ( 3.18 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/Response.php ( 8.81 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/response/Html.php ( 0.97 KB )
/www/wwwroot/cms/web/vendor/topthink/framework/src/think/Cookie.php ( 6.06 KB )
/www/wwwroot/cms/web/vendor/topthink/think-trace/src/Html.php ( 4.49 KB )

CONNECT:[ UseTime:0.000560s ] mysql:host=mysql;port=3306;dbname=cms_admin;charset=utf8mb4
SHOW FULL COLUMNS FROM `cms_website` [ RunTime:0.000970s ]
SELECT `id`,`status`,`template` FROM `cms_website` WHERE `domain` = 'www.0311app.com' LIMIT 1 [ RunTime:0.000303s ]
CONNECT:[ UseTime:0.000536s ] mysql:host=mysql;port=3306;dbname=cms_test1;charset=utf8mb4
SHOW FULL COLUMNS FROM `cms_news` [ RunTime:0.000934s ]
SELECT * FROM `cms_news` WHERE `id` = '15649' LIMIT 1 [ RunTime:0.000613s ]
SHOW FULL COLUMNS FROM `cms_classed` [ RunTime:0.001027s ]
SELECT * FROM `cms_classed` WHERE `id` = 78 LIMIT 1 [ RunTime:0.000298s ]
SHOW FULL COLUMNS FROM `cms_news_data` [ RunTime:0.000821s ]
SELECT * FROM `cms_news_data` WHERE `pid` = '15649' LIMIT 1 [ RunTime:0.001034s ]
UPDATE `cms_news` SET `click` = '2' WHERE `id` = '15649' [ RunTime:0.001134s ]
SELECT `id`,`title`,`title_img`,`click`,`created_at` FROM `cms_news` WHERE `cid` = '78' ORDER BY rand() LIMIT 6 [ RunTime:0.007074s ]
SHOW FULL COLUMNS FROM `cms_config` [ RunTime:0.001113s ]
SELECT `value` FROM `cms_config` WHERE `category` = 'base_config' AND `field` = 'web_title' LIMIT 1 [ RunTime:0.000316s ]
SELECT `value` FROM `cms_config` WHERE `category` = 'base_config' AND `field` = 'web_subtitle' LIMIT 1 [ RunTime:0.000251s ]
SELECT `value` FROM `cms_config` WHERE `category` = 'classed_news_config' AND `field` = 'detail_seo_title' LIMIT 1 [ RunTime:0.000255s ]
SELECT `value` FROM `cms_config` WHERE `category` = 'classed_news_config' AND `field` = 'detail_seo_keywords' LIMIT 1 [ RunTime:0.000239s ]
SELECT `value` FROM `cms_config` WHERE `category` = 'classed_news_config' AND `field` = 'detail_seo_description' LIMIT 1 [ RunTime:0.000237s ]
SELECT `value` FROM `cms_config` WHERE `category` = 'base_config' AND `field` = 'web_logo' LIMIT 1 [ RunTime:0.000239s ]
SELECT `value` FROM `cms_config` WHERE `category` = 'base_config' AND `field` = 'web_title' LIMIT 1 [ RunTime:0.000219s ]
SHOW FULL COLUMNS FROM `cms_soft` [ RunTime:0.000949s ]
SELECT `id`,`title`,`title_img`,`cid`,`size`,`star` FROM `cms_soft` WHERE ( `pid` IN ('1','3') ) ORDER BY `created_at` DESC LIMIT 6 [ RunTime:0.052773s ]
SELECT `name` FROM `cms_classed` WHERE `id` = 49 LIMIT 1 [ RunTime:0.000529s ]
SELECT `name` FROM `cms_classed` WHERE `id` = 45 LIMIT 1 [ RunTime:0.000501s ]
SELECT `name` FROM `cms_classed` WHERE `id` = 16 LIMIT 1 [ RunTime:0.000489s ]
SELECT `id`,`cid`,`title`,`title_img` FROM `cms_news` WHERE `cid` = '78' AND `title_img` IS NOT NULL ORDER BY rand() LIMIT 5 [ RunTime:0.005699s ]
SELECT `id`,`title`,`title_img`,`cid`,`size`,`star` FROM `cms_soft` WHERE ( `pid` IN ('2','4') ) ORDER BY `created_at` DESC LIMIT 6 [ RunTime:0.048109s ]
SELECT `name` FROM `cms_classed` WHERE `id` = 29 LIMIT 1 [ RunTime:0.000474s ]
SELECT `id`,`cid`,`title`,`title_img` FROM `cms_soft` WHERE `title_img` IS NOT NULL ORDER BY rand() LIMIT 4 [ RunTime:0.216086s ]
SELECT `id`,`title`,`title_img` FROM `cms_news` ORDER BY `click` DESC,`id` ASC LIMIT 10 [ RunTime:0.007500s ]
SELECT `id`,`title`,`title_img` FROM `cms_soft` ORDER BY `click` DESC LIMIT 6 [ RunTime:0.000385s ]
SELECT `value` FROM `cms_config` WHERE `category` = 'base_config' AND `field` = 'icp_code' LIMIT 1 [ RunTime:0.000412s ]
SELECT `value` FROM `cms_config` WHERE `category` = 'base_config' AND `field` = 'web_title' LIMIT 1 [ RunTime:0.000382s ]

0.485738s

ShowPageTrace