hashcat Forum
Help with Win Zip / Zip2 Hash from zip2john - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: Help with Win Zip / Zip2 Hash from zip2john (/thread-6946.html)



Help with Win Zip / Zip2 Hash from zip2john - geekyhawkes - 10-21-2017

Hello;

I am trying to recover a password from a zip file and have had issues getting hashcat to accept the zip file hash.  I created the has using zip2john and jtr ids the hash as: ZIP, WINZIP, PBKDF2-SHA1 4x SSE2.  

If I try and use: 
hashcat -m 13600 -a 3 -o answer.txt -d 2 myhash.hash I get the error:

Hashfile on line 1 () Salt-value exception
No Hashes loaded

The has file itself looks like this:

[redacted]

Raw output from zip2john at the terminal gives this:

[code][redacted]

[redacted]

If I use the full output from the terminal of zip2john then Hashcat complains of Signature unmatched - no hashes loaded.

[color=#000000][size=small]Any help would be well
received.  JTR is much slower than using my GPU/hashcat 



RE: Help with Win Zip / Zip2 Hash from zip2john - atom - 10-22-2017

If you have this:

Quote:Hashfile on line 1 () Salt-value exception

then you have either an empty first line or you are using a BOM (eventually added by a texteditor) that you need to turn off.

However, pasting a hash violates forum rules, therefore banning for a week.


RE: Help with Win Zip / Zip2 Hash from zip2john - geekyhawkes - 10-29-2017

Sorry for previously posting the has - lesson learned!

The first line doesnt seem to be empty and I have checked with notepad++ that I am not adding a BOM.

It would seem that the most common error is "Signature unmatched / No hashes loaded" . I recreated the hash using zp2john directly to a hash file - didnt open with any editor and attempted to use hashcat against it. The output of hashcat seems to show a random symbol before the $zip2$ in the command prompt (assuming that hashcat isnt adding the symbol?). In notepad++ I cannot see the symbol added at the command line as part of the error message.

Any help welcomed.