10-18-2018, 04:00 PM
I've run into similar issues. I was testing some Zip files I knew passwords to and I wasn't able to recover the password. I've created the Zips by using the lastest, older 7Zip tools and also the latest WinZip tool without any success. I've tried it with both Hashcat 3.6.0 and 4.2.1 with no success. Any hints?
I've noticed that the newer version of zip2john do not extract compressed DF data if the file is too long and instead outputs ZIPDATA_FILE_PTR_RECORD structure. Does Hashcat support this kind of data on input? Should we use the older version of zip2john for better compatibility with hashcat?
The structure looks like this:
ZIPDATA_FILE_PTR_RECORD (this can be the 'DF' of this above hash line).
*ZFILE*Fn*Oh*Ob* (Note, the leading and trailing * are the * that 'wrap' the DF object.
ZFILE This is the literal string ZFILE
Fn This is the name of the .zip file. NOTE the user will need to keep the .zip file in proper locations (same as
was seen when running zip2john. If the file is removed, this hash line will no longer be valid.
Oh Offset to the zip central header record for this blob.
Ob Offset to the start of the blob data
Info about structure is taken from https://github.com/magnumripper/JohnTheR...zip2john.c
I've noticed that the newer version of zip2john do not extract compressed DF data if the file is too long and instead outputs ZIPDATA_FILE_PTR_RECORD structure. Does Hashcat support this kind of data on input? Should we use the older version of zip2john for better compatibility with hashcat?
The structure looks like this:
ZIPDATA_FILE_PTR_RECORD (this can be the 'DF' of this above hash line).
*ZFILE*Fn*Oh*Ob* (Note, the leading and trailing * are the * that 'wrap' the DF object.
ZFILE This is the literal string ZFILE
Fn This is the name of the .zip file. NOTE the user will need to keep the .zip file in proper locations (same as
was seen when running zip2john. If the file is removed, this hash line will no longer be valid.
Oh Offset to the zip central header record for this blob.
Ob Offset to the start of the blob data
Info about structure is taken from https://github.com/magnumripper/JohnTheR...zip2john.c