|
|
|
|
Menu |
|
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| | |
|
|
|
|
|
User Info |
|
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 79
Members: 0
Total: 79
|
|
|
|
|
|
Full disclosure |
|
|
|
|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
Cracking a zip file |
|
Posted: Sun Jun 14, 2009 6:03 am |
|
|
Munchieman |
Beginner |
|
|
Joined: Jun 14, 2009 |
Posts: 2 |
|
|
|
|
|
|
|
Hello,
I haven't seen much here about zip files, so I may be barking up the wrong tree. I am attempting to crack a zip file I created a long time ago. It is a zip file that is about 850K named temppix.zip. It contains 1 file called other pix. The file is encrypted too. I tried using the Passware software for a few days, but I'm past all of the normal short cuts, and using simple brute force. I don't ever remember using a password that is less that 10 characters, and I don't have the months it will take to brute force the file.
After the various attacks, it comes up with some text that seems to include an MD5, but the online MD5 engines say that it isn't.
Protection: Zip 2.0 - Extraction Password, Default encryption
Complexity: Brute-force - Fast
MD5: 079D883C35C1B556BEBA786C65CD177D
Any suggestions on how I can open this file? Or, even get a list of the files that are within the otherpix.zip file?
Thanks for the help!
Munchieman |
|
|
|
|
|
|
|
|
Posted: Sun Jun 14, 2009 9:17 am |
|
|
waraxe |
Site admin |
|
|
Joined: May 11, 2004 |
Posts: 2407 |
Location: Estonia, Tartu |
|
|
|
|
|
|
Zip 2.0 encryption scheme is cryptographically weak and this is know allready long time, for example:
http://archive.cert.uni-stuttgart.de/vuln-dev/2003/02/msg00019.html
There are password crackers, which can decrypt ZIP archive contents within reasonable timeframe:
http://www.elcomsoft.com/archpr.html
Code: |
Advanced Archive Password Recovery recovers protection passwords or unlocks encrypted ZIP and RAR archives created with all versions of popular archivers. Recover passwords for plain and self-extracting archives created with PKZip and WinZip, RAR and WinRAR automatically or with your assistance. Guaranteed unlocking of archives created with WinZip 8.0 and earlier in under one hour is possible by exploiting an implementation flaw.
|
|
|
|
|
|
|
|
|
|
Posted: Mon Jun 15, 2009 4:27 pm |
|
|
Munchieman |
Beginner |
|
|
Joined: Jun 14, 2009 |
Posts: 2 |
|
|
|
|
|
|
|
Hey Waraxe,
Thanks for the reply. The weakness seems to be available when the file contains more than 3 to 5 files. I don't remember why, but I wanted to protect the file names, so I ziped the files into an encrypted archive that hides the filenames, and then zipped that archive into another encrypted archive.
The software you suggested has been tried, and says that it can't do the guaranteed zip crack because of there only being 1 file in the archive.
Any idea what kind of MD5 hash the Passware software showed?
MD5: 079D883C35C1B556BEBA786C65CD177D
Thanks again!
Munchieman |
|
|
|
|
www.waraxe.us Forum Index -> General discussion
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|