hashcat Forum › Support › hashcat v
How to extract zip?

Thread Closed 
Threaded Mode
How to extract zip?
qwer1234 Offline
Junior Member
**
Posts: 3
Threads: 1
Joined: Jul 2016
#1
07-27-2016, 01:36 AM
how i can extract zip information, in order to hashcat could take it and hack the password?
zip - the latest version, hashcat - 3.00 version
thanks
Find
epixoip Offline
Legend
******
Posts: 2,936
Threads: 12
Joined: May 2012
#2
07-27-2016, 07:31 AM
zip2john, but not all zip formats are supported.
Find
freeroute Offline
Member
***
Posts: 73
Threads: 21
Joined: Jul 2016
#3
07-27-2016, 09:56 AM
(07-27-2016, 07:31 AM)epixoip Wrote: zip2john, but not all zip formats are supported.

What command did you use to crack encrypted zip file?

I tried, but not worked.

root@The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali):~/hashes/zip2john# zip2john test.zip > test.zip.hash
ver a  efh 5455  efh 7875  test.zip->test PKZIP Encr: 2b chk, TS_chk, cmplen=28, decmplen=16, crc=F30B8770
root@The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali):~/hashes/zip2john# hashcat -D 1 --force -w 3 -m 13600 -a 0 test.zip.hash /usr/share/wordlists/rockyou.txt
hashcat (v3.00) starting...

WARNING: Hashfile 'test.zip.hash' on line 1 (test.zip:$pkzip2$1*2*2*0*1c*10*f30b8770*0*3e*0*1c*f30b*495b*14f1b9c5523b908446a836c0ee0f109fdf033eb16a8b360d528c3a4c*$/pkzip2$:::::test.zip): Signature unmatched
Parsed Hashes: 1/1 (100.00%)

ERROR: No hashes loaded     

root@The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali):~/hashes/zip2john# file test.zip
test.zip: Zip archive data, at least v1.0 to extract
Find
atom Offline
Administrator
*******
Posts: 5,185
Threads: 230
Joined: Apr 2010
#4
07-27-2016, 11:10 AM
If the hash contains the signature $pkzip2$ it's not supported with hashcat
Website Find
qwer1234 Offline
Junior Member
**
Posts: 3
Threads: 1
Joined: Jul 2016
#5
07-27-2016, 02:03 PM
as usually don't works exactly what i need. any idea what to do with signature $pkzip2$?
Find
qwer1234 Offline
Junior Member
**
Posts: 3
Threads: 1
Joined: Jul 2016
#6
07-27-2016, 10:05 PM
really no one idea? don't disappoint poor girl )
Find
epixoip Offline
Legend
******
Posts: 2,936
Threads: 12
Joined: May 2012
#7
07-28-2016, 01:03 AM
Hashcat does not support PKZIP, only ZipCrypto. You can use JTR or something for PKZIP.
Find
mrodriguez Offline
Junior Member
**
Posts: 8
Threads: 2
Joined: Sep 2015
#8
07-28-2016, 05:19 PM
Somewhat off topic - but am I correct in understanding that JTR is not GPU accelerated for PKZIP?

If that's correct - then there is no free tool for GPU pkzip password recovery (that I am aware of). Even commercial tools are not viable for licensing in the US due to patent restrictions?

I'm sure this is the reason that the addition of the PKZIP format has been requested for hashcat previously.
Find
epixoip Offline
Legend
******
Posts: 2,936
Threads: 12
Joined: May 2012
#9
07-28-2016, 08:35 PM
PKZIP format is a mess. We looked at implementing it on GPU and it was a bucket of NOPE. I mean we'll eventually need to get around to it, but the LOE is massive.
Find
mrodriguez Offline
Junior Member
**
Posts: 8
Threads: 2
Joined: Sep 2015
#10
07-29-2016, 03:12 PM
Ha - ok, understood. We appreciate all the effort thus far...
Find
Thread Closed