[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID:
<CWXP265MB2167D4F91D82F15A6A27C47DFE3CA@CWXP265MB2167.GBRP265.PROD.OUTLOOK.COM>
Date: Sat, 22 Jul 2023 20:30:37 +0000
From: luke me <lukeme386@...look.com>
To: "john-users@...ts.openwall.com" <john-users@...ts.openwall.com>
Subject: John completes job immediately without result?
Hi,
I hashed PKZIP file with zip2john from the latest release and produced hash file: sales.txt. The hash is extremely long 1.1MB, when I initiate 'john' using wordlist (rockyou) it exits immediately with status 'complete'.
This takes 1 sec, or less and no password or any update it provided it the hash file. It appears the job exits with no result. The job simply does not run.
I am using Win10, but get same result on Ubuntu.
Question: is a very long hash value produced by zip2john normal? I believe the file was zipped using PKZIP2 in deflated compression mode.
> john --wordlist=rockyou.txt sales.txt
Using default input encoding: UTF-8
Loaded 1 password hash (PKZIP [32/64])
Will run 4 OpenMP threads
Press 'q' or Ctrl-C to abort, 'h' for help, almost any other key for status
0g 0:00:00:01 DONE (2023-07-22 20:08) 0g/s 10696Kp/s 10696Kc/s 10696KC/s "2flower"..7¡Vamos!
Session completed.
> john --show sales.txt
0 password hashes cracked, 1 left
> john.log
0:00:00:00 Starting a new session
0:00:00:00 Loaded a total of 1 password hash
0:00:00:00 Command line: john --wordlist=rockyou.txt sales.txt
0:00:00:00 - UTF-8 input encoding enabled
0:00:00:00 - Passwords will be stored UTF-8 encoded in .pot file
0:00:00:00 - Hash type: PKZIP (min-len 0, max-len 21 [worst case UTF-8] to 63 [ASCII])
0:00:00:00 - Algorithm: 32/64
0:00:00:00 - Will reject candidates longer than 63 bytes
0:00:00:00 - Candidate passwords will be buffered and tried in chunks of 8192
0:00:00:00 Proceeding with wordlist mode
0:00:00:00 - Wordlist file: rockyou.txt
0:00:00:00 - memory mapping wordlist (139921497 bytes)
0:00:00:00 - No word mangling rules
0:00:00:00 - No stacked rules
0:00:00:01 Session completed
The only why I can get 'john' to run is without using any wordlist, I have tried more than one wordlist file.
Without it runs using wordlist:password.lst and then in incremental mode ok:
> john sales.txt
Using default input encoding: UTF-8
Loaded 1 password hash (PKZIP [32/64])
Will run 4 OpenMP threads
Proceeding with single, rules:Single
Press 'q' or Ctrl-C to abort, 'h' for help, almost any other key for status
Almost done: Processing the remaining buffered candidate passwords, if any.
0g 0:00:00:01 DONE 1/3 (2023-07-22 20:18) 0g/s 81317p/s 81317c/s 81317C/s Exepdf1900..Epdf1900
Proceeding with wordlist:password.lst
Enabling duplicate candidate password suppressor
Disabling duplicate candidate password suppressor
Is this a bug or is the ZIP file produced with unsupported version of PKZIP?
Thanks you
Lucas
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
