hashcat Forum
Intercept zip decryption key or files from an application - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Misc (https://hashcat.net/forum/forum-15.html)
+--- Forum: General Talk (https://hashcat.net/forum/forum-33.html)
+--- Thread: Intercept zip decryption key or files from an application (/thread-9036.html)



Intercept zip decryption key or files from an application - D-vaan2 - 03-12-2020

If an application is reading from a password protected zip file, is there a way to intercept the key being sent to decrypt the zip file. Or, is there a way to dump the files being read themselves? 


RE: Intercept zip decryption key or files from an application - DanielG - 03-12-2020

Yes but it heavily depends on the application and how you have access to it. You can decompile the application and look for the password, debug the running application, run a trace on calls that are being made, etc. It depends on what you can do.


RE: Intercept zip decryption key or files from an application - BoatRacer - 11-10-2020

(03-12-2020, 05:33 PM)DanielG Wrote: Yes but it heavily depends on the application and how you have access to it. You can decompile the application and look for the password, debug the running application, run a trace on calls that are being made, etc. It depends on what you can do.
Whether it is decompilable or not depends on the language it was written. C#, Java, Python are easily decompilable back to readable code.