Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <CAL7A2DwkyTieHvQLkN5Uqv1hV+XoVCsqH+E+Y0uOOwK+ALj4vA@mail.gmail.com>
Date: Tue, 7 Oct 2014 14:45:05 -0700
From: Danux <danuxx@...il.com>
To: john-users@...ts.openwall.com
Subject: Re: Zip2john not working

Hi again,

I downloaded the latest snapshot of bleeding-jumbo since two days ago:

https://github.com/magnumripper/JohnTheRipper/commits/bleeding-jumbo


And it did not work, now it says no password cracked found :-(

Any work round? Below the log of execution:


[root@run]# ./zip2john Winzip.zip > Winzip.hash


[root@ run]# cat Winzip.hash

Winzip.zip:$zip2$*0*3*0*c1892f8c9d3945d9b03abf230eea6bd7*1ca6*56b051*ZFILE*Winzip.zip*0*42*5c8ba3573b126e8a4c26*$/zip2$:::::Winzip.zip


[root@ run]# cat wordlist

zephan

penangirow

!!!alex!!!                <--- Winzip password

3113618031


[root@ run]# ./john Winzip.hash --wordlist=wordlist

Loaded 1 password hash (ZIP, WinZip [PBKDF2-SHA1 4x SSE2])

Press 'q' or Ctrl-C to abort, almost any other key for status

0g 0:00:00:00 DONE (2014-10-07 09:11) 0g/s 35.71p/s 35.71c/s 35.71C/s
zephan..3113618031

Session completed


[root@ run]# ./john Winzip.hash --show

0 password hashes cracked, 1 left

On Mon, Oct 6, 2014 at 12:14 PM, magnum <john.magnum@...hmail.com> wrote:

> On 2014-10-06 18:14, Danux wrote:
>
>> I recently downloaded the latest jumbo version
>> *john-1.7.9-jumbo-7.tar.gz*:
>> and when trying to crack a file created with the latest version of Winzip
>> (18.5) for Windows 64-bit, john says it found 4 guesses and when printing
>> the cracked one via --show it displays the wrong one. Below the detailed
>>
>
> For cracking WinZIP, you should use a snapshot of bleeding-jumbo instead.
> Since July, the false positives are (afaik) gone for good. You need to
> re-run [latest version of] zip2john as well.
>
> But what you describe is still a bug for (other) formats that may find
> false/alternative passwords: --show only shows the last cracked
> alternative. We have an open issue for that on GitHub. It's currently
> marked as "enhancement", maybe we should upgrade it to a "bug"...
>
> magnum
>
>


-- 
DanUx

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.