10-26-2010, 07:53 AM
I've been searching for some time now for a zip (standard, not aes) compatible password recovery program that takes advantage of modern, multi-core systems and, even better, the latest generation of GPUs (Nvidia in my case, so CUDA). Unfortunately, though I've gone through dozens and dozens of programs, both cutting edge and years old, none seem to fit this criteria - either they are so old they aren't even multithreaded (let alone make use of GPUs) or they simply don't support zip at all. This last has definitely been the most common, as 9 out of 10 programs I run across that use GPUs, for instance, are either a SHA1/MD5/MD4 hash cracker to the exclusion of formats such as zip/rar or are dedicated solely to rar (such as crark, rargpu, etc).
I have yet to find a single program, in fact, that appears leverage GPUs for cracking standard zip files - there is ONE GPU program, called Accent Zip Password Recovery, but it only handles AES zip files. My problem is that I have a single passworded zip from many, many years ago that I, in my security-conscious insanity, protected with some fairly large character-count key - which I have long since forgotten. I would definitely like to be able to access this file and have tried a number of standard cpu-based password recovery packages, including Advanced Archive Password Recovery from Elcomsoft, but they are simply not fast enough to access this file in a reasonable amount of time - even the best don't seem significantly multithreaded, for instance.
So, after running across oclhashcat today and finding it to be well endowed in both the multithreading and GPU-use areas, I decided to do a quick check on the forums to see if anyone had asked about possible zip cracking. I found one post in a feature request thread from about 4 months ago mentioning zip files, but no real response to it.
So my question is the following - is this a feature that could possibly be added to oclhashcat, being able to leverage its power toward breaking the encryption on standard, non-aes zip files (all types would be best, of course, but my interest is in the older, pre Winzip 9 ones with no AES)? Or is there some technical reason why the hash crackers like oclhashcat never seem to support compressed archives like zip or rar files?
Thanks for your time.
I have yet to find a single program, in fact, that appears leverage GPUs for cracking standard zip files - there is ONE GPU program, called Accent Zip Password Recovery, but it only handles AES zip files. My problem is that I have a single passworded zip from many, many years ago that I, in my security-conscious insanity, protected with some fairly large character-count key - which I have long since forgotten. I would definitely like to be able to access this file and have tried a number of standard cpu-based password recovery packages, including Advanced Archive Password Recovery from Elcomsoft, but they are simply not fast enough to access this file in a reasonable amount of time - even the best don't seem significantly multithreaded, for instance.
So, after running across oclhashcat today and finding it to be well endowed in both the multithreading and GPU-use areas, I decided to do a quick check on the forums to see if anyone had asked about possible zip cracking. I found one post in a feature request thread from about 4 months ago mentioning zip files, but no real response to it.
So my question is the following - is this a feature that could possibly be added to oclhashcat, being able to leverage its power toward breaking the encryption on standard, non-aes zip files (all types would be best, of course, but my interest is in the older, pre Winzip 9 ones with no AES)? Or is there some technical reason why the hash crackers like oclhashcat never seem to support compressed archives like zip or rar files?
Thanks for your time.
