06-20-2023, 09:27 AM
(06-19-2023, 06:03 PM)marc1n Wrote: Hashcat doesn't support all versions of zip/7z/rar yet. You can see supported hashes by running hashcat --help.
Sadly that's at best a half true. Yes, it lists hashes. But there is no way to tell if the hash extracted from the zip file is supported. In all cases I described hashes produced by zip2john looked correctly and were read by hashcat, it just didn't crack the password even after exhausting the search space for a given mask.
How am I going to know whether the problem is with a wrong mask, or whether for this specific zip I am just wasting time with hashcat? No way to tell.
I belive this deserves some additional info in documentation. Fact that none of the tutorials/sources I checked while searching for what I am doing wrong mentioned it makes me believe I am not the first one to miss the problem.