Reputation: 103
I have an old zip file with a lost password.
zipinfo -z
tells me its version Zip 2.0 which uses PKWARE encryption. Good news as that's apparently weak.
Bad news is nothing I've searched & founds tells me if its possible to crack without using brute force.
PKCrack looked like an option but it requires an unencrypted version of one of the files which I don't have.
I tried fcrackzip with a dictionary but it seems I don't remember anything about the password.
Does anyone know a good method to recover or unzip the files or the password or crack the zip without using brute force?
I believe it was encrypted on Windows - probably XP. I'm now using Ubuntu 18.04 LTS.
Here's the zipinfo -v output:
offset of local header from start of archive: 10089220 (000000000099F304h) bytes
file system or operating system of origin: NTFS
version of encoding software: 2.0
minimum file system compatibility required: MS-DOS, OS/2 or NT FAT
minimum software version required to extract: 2.0
compression method: deflated
compression sub-type (deflation): normal
file security status: encrypted
extended local header: no
file last modified on (DOS date/time): 2004 Feb 19 14:13:00
32-bit CRC value (hex): 498a9daf
compressed size: 39271 bytes
uncompressed size: 39855 bytes
length of filename: 16 characters
length of extra field: 0 bytes
length of file comment: 0 characters
disk number on which file begins: disk 1
apparent file type: binary
non-MSDOS external file attributes: 000000 hex
MS-DOS file attributes (20 hex): arc
Thank you for any help - these files are important to me
Upvotes: 1
Views: 3195
Reputation: 617
Try fcrackzip
using the RockYou.txt
password list.
fcrackzip -v -u -D -p PATH/rockyou.txt NAME_OF_ZIP.zip
-v
: for verbose mode.-u
: for weed out wrong passwords.-D
: for using a dictionary.-p
: for using a string as a password.https://github.com/brannondorsey/naive-hashcat/releases/download/data/rockyou.txt
Upvotes: 1