Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <f74a2582c5d6cbe46701aeaba4dba201@smtp.hushmail.com>
Date: Tue, 14 Apr 2015 18:42:47 +0200
From: magnum <john.magnum@...hmail.com>
To: john-users@...ts.openwall.com
Subject: Re: malloc: Cannot allocate memory. Version 1.79-jumbo
 5

So maybe it's an older version than our zip2john can handle. However,
when I create a sample file using zip 3.0, zip2john also shows "ver 14"
(btw that is actually 0x14 so same as the "20" reported from 7zip) so
I'm not sure what's happening here.

Would you be able to supply a sample file that has this problem, and a
known password? Either publicly or for a narrower audience (normally for
pkzip it would be JimF but he seems to be unavailable right now so maybe
me instead).

BTW TOPS-20 wow hardcore ^^

magnum


On 2015-04-14 14:32, Felix Quintana wrote:
> zip2john.exe ../x.zip > ../zip1.hashes
> ver 14  x.zip->adp1.adp PKZIP Encr: cmplen=0, decmplen=16384, crc=0
> ...
> ver 14  x.zip->TOTAL.DBF PKZIP Encr: cmplen=0, decmplen=725301, crc=0
> 
> The zip is not damaged. It's a pretty old version of zip. And in the header has a changed byte. Winrar and 7zip are able to open it without problems.
> 
> This is an extract from the report of Winrar.
> 
> Size            Packed   CRC          Name
> 16384          2645       05987913  adp1.adp
> ...
> 725301        66625     12c26304  TOTAL.DBF
> 
> 7zip
> ---------------------------
> Properties
> ---------------------------
> Name: adp1.adp
> Size: 16 384
> Packed Size: 2 645
> Encrypted: +
> CRC: 05987913
> Method: ZipCrypto Deflate
> Host OS: TOPS-20
> Version: 20
> ----------------------------
> 
> 
> --------------------------------------------
> On Mon, 4/13/15, magnum <john.magnum@...hmail.com> wrote:
> 
>  Subject: Re: [john-users] malloc: Cannot allocate memory. Version 1.79-jumbo 5
>  To: john-users@...ts.openwall.com
>  Date: Monday, April 13, 2015, 4:45 PM
>  
>  On 2015-04-13 17:49, Felix Quintana
>  wrote:
>  > With version 1.8.0-jumbo-1_omp [cygwin 64-bit
>  SSE4.1-autoconf] get the following:
>  > 
>  > john.exe ../zip0.hashes
>  > No password hashes loaded (see FAQ
>  > 
>  > john.exe ../zip0.hashes --format=pkzip
>  > No password hashes loaded (see FAQ)
>  > 
>  > This the content of hash file:
>  >
>  x.zip:$pkzip2$3*1*1*0*8*0*0000*8536**1*0*8*0*0000*8946**2*0*0*4000*0*0*26*8*0*0000*541d**$/pkzip2$:::::../x.zip
>  > 
>  > Windows 7 x64 Ultimate SP1
>  
>  It looks to me that unless we have a bug in zip2john, that
>  zip file is
>  simply broken. Sizes of 0, checksums of zero. What
>  (informational)
>  output do you get to screen/stderr when running zip2john on
>  that file?
>  
>  magnum
>  
>  
> 


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.