zip file cracking
#1
I encrypted a file with a simple numerical password. but when I go to hash it, I get an error talking about it being oversized and attempting to truncate the file. after realizing that zip2john wouldn't work, I then tried 'zip2john -c file'. running it through again after removing the file names and just leaving the $pkzip2$ on both the front and end, it will run for a second but not give an output. knowing that it's compressed, I chose 17200 even know it's only a checksum file. after that, I tried 17230 thinking that the format was the issue. both times saying 'no hashes loaded'

I'm still fairly new to this and can't figure out for the life of me what's wrong.
Reply
#2
Your zip version may not be supported by hashcat. Try john the ripper. https://www.openwall.com/john/
Reply
#3
(06-02-2022, 09:33 AM)marc1n Wrote: Your zip version may not be supported by hashcat. Try john the ripper. https://www.openwall.com/john/

I tired JTR too. but for some reason, it doesn't display the cracked password. I can probably write that into a file and dump it though. but I will absolutely go through the documentation and see of there is something the help command left out

thank you

*edit* found out that I need a password list and can't just brute force it
Reply
#4
(06-02-2022, 10:17 AM)Novus Wrote: *edit* found out that I need a password list and can't just brute force it

this shouldnt be the problem, it doesnt matter for hashcat how do you attack the hash

i think newest zip and or what kind of software do you use to zip? changed something in their encryption and therefore, zip2john and hashcat fails
Reply
#5
(06-03-2022, 01:27 PM)Snoopy Wrote:
(06-02-2022, 10:17 AM)Novus Wrote: *edit* found out that I need a password list and can't just brute force it

this shouldnt be the problem, it doesnt matter for hashcat how do you attack the hash

i think newest zip and or what kind of software do you use to zip? changed something in their encryption and therefore, zip2john and hashcat fails

that specific edit was about JTR but I should have been more clear about that. as for the issue; it may have something to do with the hash having 76958297 characters and hashcat attempts a turnicate to 60181080 but fails. as for this issue, I am not smart enough to manually cull the file at a specific point without messing with the cracking
Reply