|
Message-ID: <1429040341.55206.YahooMailBasic@web163404.mail.gq1.yahoo.com> Date: Tue, 14 Apr 2015 12:39:01 -0700 From: Felix Quintana <felix.quintgz@...oo.com> To: john-users@...ts.openwall.com Subject: Re: malloc: Cannot allocate memory. Version 1.79-jumbo 5 I can send you the zip file by mail. It has 2.38MBytes. The key is lost. Is the reason for using john. The other option I have is to decompile the application of foxpro that uses it (they also lost the sources). Looking references in the executable seems to use XceedZip.dll. -------------------------------------------- On Tue, 4/14/15, magnum <john.magnum@...hmail.com> wrote: Subject: Re: [john-users] malloc: Cannot allocate memory. Version 1.79-jumbo 5 To: john-users@...ts.openwall.com Date: Tuesday, April 14, 2015, 12:42 PM So maybe it's an older version than our zip2john can handle. However, when I create a sample file using zip 3.0, zip2john also shows "ver 14" (btw that is actually 0x14 so same as the "20" reported from 7zip) so I'm not sure what's happening here. Would you be able to supply a sample file that has this problem, and a known password? Either publicly or for a narrower audience (normally for pkzip it would be JimF but he seems to be unavailable right now so maybe me instead). BTW TOPS-20 wow hardcore ^^ magnum On 2015-04-14 14:32, Felix Quintana wrote: > zip2john.exe ../x.zip > ../zip1.hashes > ver 14 x.zip->adp1.adp PKZIP Encr: cmplen=0, decmplen=16384, crc=0 > ... > ver 14 x.zip->TOTAL.DBF PKZIP Encr: cmplen=0, decmplen=725301, crc=0 > > The zip is not damaged. It's a pretty old version of zip. And in the header has a changed byte. Winrar and 7zip are able to open it without problems. > > This is an extract from the report of Winrar. > > Size Packed CRC Name > 16384 2645 05987913 adp1.adp > ... > 725301 66625 12c26304 TOTAL.DBF > > 7zip > --------------------------- > Properties > --------------------------- > Name: adp1.adp > Size: 16 384 > Packed Size: 2 645 > Encrypted: + > CRC: 05987913 > Method: ZipCrypto Deflate > Host OS: TOPS-20 > Version: 20 > ---------------------------- > > > -------------------------------------------- > On Mon, 4/13/15, magnum <john.magnum@...hmail.com> wrote: > > Subject: Re: [john-users] malloc: Cannot allocate memory. Version 1.79-jumbo 5 > To: john-users@...ts.openwall.com > Date: Monday, April 13, 2015, 4:45 PM > > On 2015-04-13 17:49, Felix Quintana > wrote: > > With version 1.8.0-jumbo-1_omp [cygwin 64-bit > SSE4.1-autoconf] get the following: > > > > john.exe ../zip0.hashes > > No password hashes loaded (see FAQ > > > > john.exe ../zip0.hashes --format=pkzip > > No password hashes loaded (see FAQ) > > > > This the content of hash file: > > > x.zip:$pkzip2$3*1*1*0*8*0*0000*8536**1*0*8*0*0000*8946**2*0*0*4000*0*0*26*8*0*0000*541d**$/pkzip2$:::::../x.zip > > > > Windows 7 x64 Ultimate SP1 > > It looks to me that unless we have a bug in zip2john, that > zip file is > simply broken. Sizes of 0, checksums of zero. What > (informational) > output do you get to screen/stderr when running zip2john on > that file? > > magnum > > >
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.