11-17-2024, 08:47 AM
(11-15-2024, 12:59 PM)Snoopy Wrote:Quote:Oh, I just found a youtube video and was able to crack the hash of hash.txt using the rockyou.txt wordlist. Hopefully I will eventually figure out how to hashcrack a zip file and a rar file I forgot the passwords to. If I don't know a password or the length, do I search for or create a wordlist and start trying an attack?
MacOS is based on FreeBSD (long time) and therefore a unix-style OS, nevertheless unix and linux are quite similar when it comes to handling tools
for zip and rar you need tools to extract the hash, John the Ripper, short JtR has many tools for that. Just google it or install it via homebre (if possible) JtR mostly adds some not needed info to the output, mostly filenames, so just take a look at example hashes https://hashcat.net/wiki/doku.php?id=example_hashes to see how the hash needs to be formed
first of all, starting with some good dictionarys is allways a valid strategy, bruteforce depends on the hashing speed and therefore isn't a good option for longer passwords
if you know "something" about the used password, example cracking your own password style, you can utilize things like maskprocessor, princeprocessor to generate special dictionarys just for your attack
I installed John the Ripper using homebrew, and I guess I need to use the command zip2john, but I get command not found message. I looked up the issue and I saw that I needed to use the command brew install john-jumbo, so I did, but still having the same issue.