Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Tue, 14 Apr 2015 12:39:01 -0700
From: Felix Quintana <felix.quintgz@...oo.com>
To: john-users@...ts.openwall.com
Subject: Re: malloc: Cannot allocate memory. Version 1.79-jumbo 5

I can send you the zip file by mail. It has 2.38MBytes.
The key is lost. Is the reason for using john.
The other option I have is to decompile the application of foxpro that uses it (they also lost the sources). 
Looking references in the executable seems to use XceedZip.dll.

--------------------------------------------
On Tue, 4/14/15, magnum <john.magnum@...hmail.com> wrote:

 Subject: Re: [john-users] malloc: Cannot allocate memory. Version 1.79-jumbo 5
 To: john-users@...ts.openwall.com
 Date: Tuesday, April 14, 2015, 12:42 PM
 
 So maybe it's an
 older version than our zip2john can handle. However,
 when I create a sample file using zip 3.0,
 zip2john also shows "ver 14"
 (btw
 that is actually 0x14 so same as the "20" reported
 from 7zip) so
 I'm not sure what's
 happening here.
 
 Would you
 be able to supply a sample file that has this problem, and
 a
 known password? Either publicly or for a
 narrower audience (normally for
 pkzip it
 would be JimF but he seems to be unavailable right now so
 maybe
 me instead).
 
 BTW TOPS-20 wow hardcore ^^
 
 magnum
 
 
 On
 2015-04-14 14:32, Felix Quintana wrote:
 >
 zip2john.exe ../x.zip > ../zip1.hashes
 > ver 14  x.zip->adp1.adp PKZIP Encr:
 cmplen=0, decmplen=16384, crc=0
 > ...
 > ver 14  x.zip->TOTAL.DBF PKZIP Encr:
 cmplen=0, decmplen=725301, crc=0
 > 
 > The zip is not damaged. It's a pretty
 old version of zip. And in the header has a changed byte.
 Winrar and 7zip are able to open it without problems.
 > 
 > This is an extract
 from the report of Winrar.
 > 
 > Size           
 Packed   CRC          Name
 > 16384          2645   
    05987913  adp1.adp
 >
 ...
 > 725301        66625 
    12c26304  TOTAL.DBF
 > 
 > 7zip
 >
 ---------------------------
 >
 Properties
 >
 ---------------------------
 > Name:
 adp1.adp
 > Size: 16 384
 > Packed Size: 2 645
 >
 Encrypted: +
 > CRC: 05987913
 > Method: ZipCrypto Deflate
 > Host OS: TOPS-20
 >
 Version: 20
 >
 ----------------------------
 > 
 > 
 >
 --------------------------------------------
 > On Mon, 4/13/15, magnum <john.magnum@...hmail.com>
 wrote:
 > 
 >  Subject:
 Re: [john-users] malloc: Cannot allocate memory. Version
 1.79-jumbo 5
 >  To: john-users@...ts.openwall.com
 >  Date: Monday, April 13, 2015, 4:45 PM
 >  
 >  On 2015-04-13
 17:49, Felix Quintana
 >  wrote:
 >  > With version 1.8.0-jumbo-1_omp
 [cygwin 64-bit
 >  SSE4.1-autoconf] get
 the following:
 >  > 
 >  > john.exe ../zip0.hashes
 >  > No password hashes loaded (see
 FAQ
 >  > 
 >  >
 john.exe ../zip0.hashes --format=pkzip
 >  > No password hashes loaded (see
 FAQ)
 >  > 
 > 
 > This the content of hash file:
 > 
 >
 > 
 x.zip:$pkzip2$3*1*1*0*8*0*0000*8536**1*0*8*0*0000*8946**2*0*0*4000*0*0*26*8*0*0000*541d**$/pkzip2$:::::../x.zip
 >  > 
 >  >
 Windows 7 x64 Ultimate SP1
 >  
 >  It looks to me that unless we have a bug
 in zip2john, that
 >  zip file is
 >  simply broken. Sizes of 0, checksums of
 zero. What
 >  (informational)
 >  output do you get to screen/stderr when
 running zip2john on
 >  that file?
 >  
 >  magnum
 >  
 >  
 > 
 
 
 

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.