john-users - Re: Cracking zip files

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAB1R3sijMR8hU3qQXRFONQxO_u0V4UWEHvQ=nxqYGiYtsr+Hdg@mail.gmail.com>
Date: Sat, 20 Feb 2016 17:50:27 -0500
From: Alex <mysqlstudent@...il.com>
To: john-users@...ts.openwall.com
Subject: Re: Cracking zip files

Hi,

>> zipfile.zip:$zip$*0*3*de3c868ba87dcff820dd1f8123b6b02f*f96a:::::zipfile.zip
>
> It looks like you used an old copy of zip2john for this.  You need to
> use zip2john from your new build, perhaps invoking it as ./zip2john when
> you're in the run directory.
>
> The new zip2john's output will include the "$zip2$" tag, not the old
> "$zip$" tag you have above.

That was a mistake. I must have pasted the old zipfile.john contents,
but it also does it with the new one:

$ ./zip2john zipfile.zip > zipfile.john
$ ls -l zipf*
-rw-rw-r-- 1 alex alex 144 Feb 20 17:47 zipfile.john
-rw-r--r-- 1 alex alex 103673 Feb 20 17:47 zipfile.zip
$ cat zipfile.john
zipfile.zip:$zip2$*0*3*0*ea66ffef1968f19b4f512b75d35e1619*f158*348b*ZFILE*zipfile.zip*15edb*15f41*65556849ac4ebd6f824d*$/zip2$:::::zipfile.zip

$ ./john zipfile.john
Using default input encoding: UTF-8
No password hashes loaded (see FAQ)

There are also two files in the zipfile.

$ unzip -v zipfile
Archive:  zipfile.zip
 Length   Method    Size  Cmpr    Date    Time   CRC-32   Name
--------  ------  ------- ---- ---------- ----- --------  ----
  388686  Unk:099   89726  77% 02-10-2016 09:37 00000000  hosts.csv
   54009  Unk:099   13467  75% 02-10-2016 09:37 00000000  files.csv
--------          -------  ---                            -------
  442695           103193  77%                            2 files

Thanks,
Alex

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.