[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <56CB40EA.6050203@gmail.com>
Date: Mon, 22 Feb 2016 18:10:02 +0100
From: Marek Wrzosek <marek.wrzosek@...il.com>
To: john-users@...ts.openwall.com
Subject: Re: Cracking zip files
Hi list,
I've two zip files, both with password 'password'. In one
(some_files.zip) there is file hello with 'Hello, world!' in it ans
hello.zip with previous hello file. JtR is cracking this zip without
problems.
Second file - some_pdfs.zip contains two test pages in pdf, and JtR only
response is:
No password hashes loaded (see FAQ)
Here are outputs of zip2john for both zip files:
some_files.zip:$zip2$*0*1*0*22577113145210b4*53db*e*528cd4370de59591f699fa532102*7a35bb447cf2cd3e3d62*$/zip2$:::::some_files.zip
some_pdfs.zip:$zip2$*0*1*0*4415572909d35406*1eb1*19be3*ZFILE*some_pdfs.zip*19c71*19cbc*ba511bb0d50f478e281f*$/zip2$:::::some_pdfs.zip
I suppose that first one is OK, because is small and JtR doesn't need
some_file.zip to crack it, it only need output of zip2john. Both zip
files are in JtR's working directory.
https://dl.dropboxusercontent.com/u/68111957/some_files.zip
https://dl.dropboxusercontent.com/u/68111957/some_pdfs.zip
Best Regards,
Marek
W dniu 22.02.2016 o 15:59, Alex pisze:
> Hi,
>
> After some experimenting, and help from Claudio on this list, I was
> able to figure out that there's something either wrong with the
> zip2john file or john itself:
>
> $ ./run/john --format:zip --test
> Will run 8 OpenMP threads
> Benchmarking: ZIP, WinZip [PBKDF2-SHA1 256/256 AVX2 8x]... (8xOMP) DONE
> Raw: 10816 c/s real, 2072 c/s virtual
> $ file zipfile.zip
> zipfile.zip: Zip archive data
> $ ./run/zip2john zipfile.zip > zipfile.john
> $ ./run/john zipfile.john
> Using default input encoding: UTF-8
> No password hashes loaded (see FAQ)
>
> $ cat zipfile.john
> zipfile.zip:$zip2$*0*3*0*ea66ffef1968f19b4f512b75d35e1619*f158*348b*ZFILE*zipfile.zip*15edb*15f41*65556849ac4ebd6f824d*$/zip2$:::::zipfile.zip
>
> I also tried creating a new zip file, and it was able to start
> cracking that one, so I know my installation is working properly.
>
> As I mentioned before, the previous install of John I had on the
> system was able to begin cracking this zip file without problem.
>
> Ideas greatly appreciated.
> Thanks,
> Alex
>
>
--
Marek Wrzosek
marek.wrzosek@...il.com
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
