Can't crack ZIP file, No hashes loaded
#1
Hello. 

I am very new to Hashcat and cracking in general. I have just started creating my own Zip files with passwords to crack. 

I've created a Zip folder with winrar. I am able to get the hash using John the ripper. 

When I try to crack the Zip hash with a word list I have no success. I recieve an error saying 

Token encoding exception

No hashes loaded.

Here is my command
> hashcat64.exe -a 0 -m 13000 $zip2$*0*3*0*abcdefghijklmnopqrstuvwxyz123456789.......*$/zip2$ C:\Users\User\Desktop\CrackMe.txt 

This hash is ovbiously not the one I am working with. I've tried to copy the format as someone may know what kind of hash it is. 

I have a feeling it has to do with the "-m 13000" argument. Perhaps I am not selecting the right hash ? 

Is my hash wrong ? Any help is appreciated. Like I say, Im very new to this, still learning, 
So if offering help please make it newbie friendly please. 

Thank you 


.png   Hashcat Help.png (Size: 30.04 KB / Downloads: 13)
Reply
#2
If I look at the example hash for 13000 on https://hashcat.net/wiki/doku.php?id=example_hashes I see it looks like this "$rar5$16$74575567518807622265582327032280$15$f8b4064de34ac02ecabfe9abdf93ed6a$8$9843834ed0f7c754"

You hash does not look like that at all, yours start with "$zip2$*0*3*0*" that looks more like 13600: "$zip2$*0*3*0*b5d2b7bf57ad5e86a55c400509c672bd*d218*0**ca3d736d03a34165cfa9*$/zip2$"

Never mind, I see you wrote 13000 in your post but in the screenshot it says 13600.
Make sure your hash looks like the hash on https://hashcat.net/wiki/doku.php?id=example_hashes, including correct encoding between the stars.
Reply
#3
Works fine wth the example hash:
Code:
hashcat -m 13600 $zip2$*0*3*0*b5d2b7bf57ad5e86a55c400509c672bd*d218*0**ca3d736d03a34165cfa9*$/zip2$  dic.txt
hashcat (v5.1.0) starting...
(...)

$zip2$*0*3*0*b5d2b7bf57ad5e86a55c400509c672bd*d218*0**ca3d736d03a34165cfa9*$/zip2$:hashcat

Session..........: hashcat
Status...........: Cracked
Hash.Type........: WinZip
Hash.Target......: $zip2$*0*3*0*b5d2b7bf57ad5e86a55c400509c672bd*d218*.../zip2$
Time.Started.....: Thu Feb 07 17:46:48 2019 (0 secs)
Time.Estimated...: Thu Feb 07 17:46:48 2019 (0 secs)
Guess.Queue......: 1/1 (100.00%)
(...)

Compare your hash to the example one.
Reply
#4
(02-07-2019, 03:20 PM)DanielG Wrote: If I look at the example hash for 13000 on https://hashcat.net/wiki/doku.php?id=example_hashes I see it looks like this "$rar5$16$74575567518807622265582327032280$15$f8b4064de34ac02ecabfe9abdf93ed6a$8$9843834ed0f7c754"

You hash does not look like that at all, yours start with "$zip2$*0*3*0*" that looks more like 13600: "$zip2$*0*3*0*b5d2b7bf57ad5e86a55c400509c672bd*d218*0**ca3d736d03a34165cfa9*$/zip2$"

Never mind, I see you wrote 13000 in your post but in the screenshot it says 13600.
Make sure your hash looks like the hash on https://hashcat.net/wiki/doku.php?id=example_hashes, including correct encoding between the stars.


Just seen these replies now.. I Swore I clicked "send replies to my email"..

Thank your help. I will try this out. Thank you.
Reply
#5
(02-07-2019, 06:48 PM)Mem5 Wrote: Works fine wth the example hash:
Code:
hashcat -m 13600 $zip2$*0*3*0*b5d2b7bf57ad5e86a55c400509c672bd*d218*0**ca3d736d03a34165cfa9*$/zip2$  dic.txt
hashcat (v5.1.0) starting...
(...)

$zip2$*0*3*0*b5d2b7bf57ad5e86a55c400509c672bd*d218*0**ca3d736d03a34165cfa9*$/zip2$:hashcat

Session..........: hashcat
Status...........: Cracked
Hash.Type........: WinZip
Hash.Target......: $zip2$*0*3*0*b5d2b7bf57ad5e86a55c400509c672bd*d218*.../zip2$
Time.Started.....: Thu Feb 07 17:46:48 2019 (0 secs)
Time.Estimated...: Thu Feb 07 17:46:48 2019 (0 secs)
Guess.Queue......: 1/1 (100.00%)
(...)

Compare your hash to the example one.

Just seen these replies now.. I Swore I clicked "send replies to my email"..

Thank your help. I will try this out. Thank you.
Reply