EvilZone
Hacking and Security => Hacking and Security => : cyberdemon September 11, 2012, 09:55:52 AM
-
please find the password in this attached file for me guys,or tell me how to do it
-
Might take a Crack at it. Any info on what this is?
-
it contains a password file (text), but secured with some encryption..i wan't to get what is inside that password file..thank you
-
I am pretty sure ZIP files does the same as RAR files, which is, encrypting the ZIP archive with the passsword given. Meaning, you cant "find the password in this attached file". You can however, brute force it.
-
I am pretty sure ZIP files does the same as RAR files, which is, encrypting the ZIP archive with the passsword given. Meaning, you cant "find the password in this attached file". You can however, brute force it.
Yes, if you don't have the password the crc will not match.
Any string above 6 character length is unlikely to be.bruteforced at home.
-
wasnt there some trick with .zip files, inwhich you could easly unlock it?
-
wasnt there some trick with .zip files, inwhich you could easly unlock it?
i think you reffer to rzip or what ever its named. then you need one of the files inside the zip not protected
then you can get the other files to or somthing like that. did that once.
if your on windows i would recomend brute or dict it with Advanced Archive Password Recovery
you can find full version as torrent
i think john can crack zip in linux. dont remember tho was some time ago i did this
-
can linux do it???how??? I have the latest edition of backtrack with me..
-
i might be wrong dont remember check john on your bt
i know there are rarcrack and fcrackzip for linux tho.
but bt must have some tool for zip that i know because i cracked a zip on bt5
iam not on my bt now so cant check but yes its possible to do it with linux
-
if your on windows i would recomend brute or dict it with Advanced Archive Password Recovery
Hmm, how about mac?@@
-
fcrackzip [-bDBchVvplum2] [--brute-force] [--dictionary] [--benchmark] [--charset characterset] [--help] [--validate] [--verbose] [--init-password string/path] [--length min-max] [--use-unzip] [--method name] [--modulo r/m] file.
fcrack Options
-h, --help
Prints the version number and (hopefully) some helpful insights.
-v, --verbose
Each -v makes the program more verbose.
-b, --brute-force
Select brute force mode. This tries all possible combinations of the letters you specify.
-D, --dictionary
Select dictionary mode. In this mode, fcrackzip will read passwords from a file, which must contain one password per line and should be alphabetically sorted (e.g. using (1)).
-c, --charset characterset-specification
Select the characters to use in brute-force cracking. Must be one of
a include all lowercase characters [a-z]
A include all uppercase characters [A-Z]
1 include the digits [0-9]
! include [!:$%&/()=?[]+*~#]
: the following characters upto the end of the spe-
cification string are included in the character set.
This way you can include any character except binary
null (at least under unix).
For example, a1:$% selects lowercase characters, digits and the dollar and percent signs.
-p, --init-password string
Set initial (starting) password for brute-force searching to string, or use the file with the name string to supply passwords for dictionary searching.
-l, --length min[-max]
Use an initial password of length min, and check all passwords upto passwords of length max (including). You can omit the max parameter.
-u, --use-unzip
Try to decompress the first file by calling unzip with the guessed password. This weeds out false positives when not enough files have been given.
-m, --method name
Use method number "name" instead of the default cracking method. The switch --help will print a list of available methods. Use --benchmark to see which method does perform best on your machine. The name can also be the number of the method to use.
-2, --modulo r/m
Calculate only r/m of the password. Not yet supported.
-B, --benchmark
Make a small benchmark, the output is nearly meaningless.
-V, --validate
Make some basic checks wether the cracker works.
fcrackzip Examples
fcrackzip -c a -p aaaaaa sample.zip
checks the encrypted files in sample.zip for all lowercase 6 character passwords (aaaaaa ... abaaba ... ghfgrg ... zzzzzz).
fcrackzip --method cpmask --charset A --init AAAA test.ppm
i'm not cracking that file for you!.. Do it yourself :P
-
eh, what they said. Bruteforce it. And holly shit, there are girls on this site? no offense of course. But yeah, brute or dict, best shot. still might try this sometime though....
-
@AmyNelle
trow that piece of shitt out the window and get a real computer ^^
or if u really like it
fcrackzip is for mac to
edit:
there are 1000's of site on google for cracking zip files
tutorials, programs and all kind of shitt
-
there are 1000's of site on google for cracking zip files
tutorials, programs and all kind of shitt
yeah, i was just looking at those. Might read some of the math and make my own, if i ever have free time again >:(
-
i'm not cracking that file for you!.. Do it yourself
hmm this sounds rude buddy, i'm surely a diy kinda guy..but pls help me on this shit..
-
hmm this sounds rude buddy, i'm surely a diy kinda guy..but pls help me on this shit..
We are not your personal army. We are here to teach and spread knowledge. Do it yourself or leave. There are more than a few tuts on how you can do this, a program capable "fcrackzip" being one of them. It even has support for a dictionary attack. if brute forcing is too long for you, go get a word list.
This is not being rude, nor was the past reply rude. YOU are being rude expecting us to do your work for you.
-
Hmm, how about mac?@@
Holy shit, your still alive! :P
Anyways, I agree with that other guy. Relax. Toss it outta the window lol, or use it to hit someone you really hate in the head. But all trolling aside, i have no idea. sorry! just wanted to say hi :D
hmm this sounds rude buddy, i'm surely a diy kinda guy..but pls help me on this shit..
gotta agree with techb, we will not hold your hand while you go potty. Google it, and try it. Fail at it. Learn from that failure. Lather, rinse, and repeat until you understand it. I mean you don't even have to use google for this, it was posted above for you! If you don't understand that code and want to know why it works, i repeat. Google. Fail. Learn. Rinse. Repeat.
good luck
-
the brute force may take from 1 seconds to 1 year or more...
if you are really planning a brute force, get a good wordlist !!
by the way, i think i once came across some website where you could upload the file to crack to their server and let them bruteforce it open for you..... (and ofc notify you by email when its finished)
-
the brute force may take from 1 seconds to 1 year or more...
if you are really planning a brute force, get a good wordlist !!
by the way, i think i once came across some website where you could upload the file to crack to their server and let them bruteforce it open for you..... (and ofc notify you by email when its finished)
yeah i remember something like that to but i have searched and cant find it :(
if anyone finds it i would love to bookmark it ^^
-
thank u all guys..keep in touch..
-
Where did you get that zip?
-
Grab a recent copy of John The Ripper, ideally Jumbo or Bigpatch versions which includes a tool called zip2john.
http://www.openwall.com/john/ (http://www.openwall.com/john/)
C:\John>zip2john.exe level.zip | tee test
level.zip->password.txt PKZIP Encr: cmplen=32, decmplen=20, crc=AF97AA93
level.zip:$pkzip$1*1*2*0*20*14*af97aa93*0*2a*0*20*af97*f143e9e1d7df31f531ba3d0c295b91b828e181525851c11bb0fcf710ddee52e9*$/pkzip$
C:\John>john.exe test
Loaded 1 password hash (PKZIP [32/32])
guesses: 0 time: 0:00:00:04 1.32% (2) (ETA: Wed Sep 12 15:55:45 2012) c/s: 1611K trying: reserveringen - reservetruppen
Go for coffee.
-
I use Atomic zip password recovery with combination of lower and capitol letter and numbers, length from1-5 still no luck.
-
@AmyNelle
trow that piece of shitt out the window and get a real computer ^^
I actually have a Windows aswell, but I needed a laptop and various told me a mac would be a very good investment since I do a lot with Adobe products and a mac is great for that. I still like it, it's a good laptop in my opinion. No way I'm throwing something that's worth 5k out loool.
eh, what they said. Bruteforce it. And holly shit, there are girls on this site? no offense of course. But yeah, brute or dict, best shot. still might try this sometime though....
Apparently yes.. @@.. Unless I'm a guy.. Last time I checked I wasn't. ;P
-
You can use rainbow tables.
Why dont anyone on this site advice rainbow tables to crack passwords.
STAFF EDIT: Dont double post
-
You can use rainbow tables.
And that does pkzip hash formats as that's what the OP was asking for?
-
You can use rainbow tables.
Why dont anyone on this site advice rainbow tables to crack passwords.
STAFF EDIT: Dont double post
You are implying you have read all posts on this forum and not seen rainbow tables been mentioned?
</rant>
Rainbow tables sure is another way to do this, but it does not guarantee anything. And you have to get or generate the tables anyway, I would think it is hard to find good tables for rar/zip cracking.
-
@Amy What type of stuff do you do on Adobe?
-
I would think it is hard to find good tables for rar/zip cracking.
I dug into this a bit and it can't be done as most versions use a KDF [1] which is used to encrypt the file. Pre-computed hash tables can't know what this value will be beforehand, same problem with salted hashes as you can't pre-compute the tables for it without doing all the possible hash values as well. Recent versions of ZIP use AES256 which would require hash tables of a ridiculous size.
[1] http://en.wikipedia.org/wiki/Key_derivation_function