NOTE: Why not use our List Manager to crack your lists? Its easy and enables better management.

NOTE: When cracking WPA/WPA2 passwords, make sure you check gpuhash.me first incase it's already been processed.

Home - Other Hashes - ZIP 2.0 encryption keys


12 Results - Page 1 of 1 -
1
Author Message
Avatar
temuag

Status: n/a
Joined: Sat, 09 Feb 2019
Posts: 9
Team:
Reputation: 0 Reputation
Offline
Sat, 09 Feb 2019 @ 14:52:07

Hello all,

I have a zip file, which is password protected with a password I set myself, and I can't recall this password (yeah i know, this sounds stupid...).

I have the source files of the zip, so my request is not about recovering data, it's just about curiosity, "what the hell could i put as a password!".

I tried lots of software online, but none of them got me the password unfortunately. The file is crypted with the basic ZipCrypto 2.0 method. The only thing I could get, is the 3 encryption keys thanks to a plain-text attack (as I have the source files).

Now, how could i get the password from them?
Here they are: 5ba2bf2e d722b57a ee1eb2d6

I tried the right folder to post my request, if it's not, apologies, and do not hesitate to move it.

Thanks in advance for your help!
temuag


Avatar
pasnger57

Status: n/a
Joined: Tue, 11 Sep 2018
Posts: 179
Team:
Reputation: 113 Reputation
Offline
Sat, 09 Feb 2019 @ 14:58:08

you can use something like zip2john to get the hash then share hash for ppl to start the space heaters on


Avatar
temuag

Status: n/a
Joined: Sat, 09 Feb 2019
Posts: 9
Team:
Reputation: 0 Reputation
Offline
Fri, 15 Feb 2019 @ 07:41:48

Here it is:


prune.zip:$pkzip2$3*1*1*2*8*c0*2645*1642*4abc09a664cff4430bccdeefc3c33fec59b9bba7cabcac46d288369a4c8155542e3e9b0f073e32167df3cdc0df397a56a39bace97407a9560617abd3403ff2a7baf5db7efbcf71443088a2c9e5084b44b173f406e2d7796b782a75274867f35fca02b2ed5432dfb1f6fc3140f6ea998af1a79f6ebdcc0f9ad8eb6934cabaf63cc6a00d731f1190922a0d130341c5f5d718aaf0718e555fd815aa48534f479a21820a4c8dcab99ae33bc4aab79819280467753bc4062df6a9a8de46fe456a2bc9*1*2*8*c0*2912*163c*c3279145b0d29f077a6d21543538f012a8e3f3630945c16fb87a4f80267253a2fd5922404a09995dc4fd86a8c44301a0aeb33cec3c985176e83624aa5743949fac6a98d72eee33a99edb117bfcc4deec8309caeb20dc7415b2a43c840e8762846a91ac4b01d7fb194392fcd389e590ee10517dead4a750b95887113d417ae3c114ffffdd5e65c6c890799c7c34203420ed9d569d4ae0dd9df74c72890444c03839eb7e43df64fa34fa50bf9cfa17bbf8713168d0d058bdcbb94f658b6fd848b4*2*0*29*1d*fe8908ba*1d3e78bb*3e*0*29*fe89*464b*7246b4436d8b956a777f27490d1fd4bfc5049374a0af135be38cf0bff5b13f5c89b7c896465b0c8d82*$/pkzip2$:::::..\..\prune.zip

Do you guys think you'll be able to find the password?

Thanks a lot!


Avatar
temuag

Status: n/a
Joined: Sat, 09 Feb 2019
Posts: 9
Team:
Reputation: 0 Reputation
Offline
Sat, 16 Feb 2019 @ 19:12:37

If I could give you more info:
- I have the encryption keys, see above
- I think I used [A-Z][a-z][0-9] chars, maybe the ! in addition
- I can’t recall the number of chars
- I must have used one or several french words (no random chars), with maybe some replacements O by 0 and A by 4

Is there any way to get the password?

Thanks a lot!


Avatar
temuag

Status: n/a
Joined: Sat, 09 Feb 2019
Posts: 9
Team:
Reputation: 0 Reputation
Offline
Wed, 20 Feb 2019 @ 17:59:23

No one can help me out?
Thanks!


Avatar
dipeperon

Status: n/a
Joined: Tue, 03 Apr 2018
Posts: 321
Team:
Reputation: 388 Reputation
Offline
Wed, 20 Feb 2019 @ 18:58:41

temuag said:

No one can help me out?
Thanks!

Cracking it would be slow as hell,
besides you clearly stated you already have the contents of the file so not much point in cracking it anyways.


My haschat stuff (rules, scripts): https://github.com/theherp/Hashcat-stuff
BTC: 3C2h4xscGRq7XfZLicoVjRVkYrqqJ1Urc5

Avatar
temuag

Status: n/a
Joined: Sat, 09 Feb 2019
Posts: 9
Team:
Reputation: 0 Reputation
Offline
Wed, 20 Feb 2019 @ 19:07:19

Thanks for your reply dipeperon!

Ok, my question was more about having a way to find it easily as the encryption is not the strongest one, and as I have more info (encryptions keys...etc.). If it's gonna be slow as hell I get it, I thought it could be better.

Just one question though: how do you decrypt other hashes, like md5 and so on... ?
I see many requests, and many answers from other members, so I was wondering how you decrypt them?


Avatar
dipeperon

Status: n/a
Joined: Tue, 03 Apr 2018
Posts: 321
Team:
Reputation: 388 Reputation
Offline
Wed, 20 Feb 2019 @ 19:31:38

temuag said:

Thanks for your reply dipeperon!

Ok, my question was more about having a way to find it easily as the encryption is not the strongest one, and as I have more info (encryptions keys...etc.). If it's gonna be slow as hell I get it, I thought it could be better.

Just one question though: how do you decrypt other hashes, like md5 and so on... ?
I see many requests, and many answers from other members, so I was wondering how you decrypt them?

Most members use hashcat, with hashcat GUI https://hashkiller.co.uk/hashcat-gui.aspx and some youtube tutorials it becomes pretty easy to get cracking yourself.

For dictionaries, see this thread: https://forum.hashkiller.co.uk/topic-view.aspx?t=11314


My haschat stuff (rules, scripts): https://github.com/theherp/Hashcat-stuff
BTC: 3C2h4xscGRq7XfZLicoVjRVkYrqqJ1Urc5

Avatar
temuag

Status: n/a
Joined: Sat, 09 Feb 2019
Posts: 9
Team:
Reputation: 0 Reputation
Offline
Sun, 24 Feb 2019 @ 19:12:47

I forgot to reply you: thanks dipeperon for these informations.

Last question: if I wanna buid my own dictionary with my own rules, to include several words combination of a french dictionary + mutations of these words, what would be the best way?

Now: I have a french dictionary but as my password must be a passphrase that includes several words, i'd like to check all the 2, 3 or 4 words possibilities of this dictionary, including mutations with capital letters, and replacement of O by 0, A by 4...

Because the software I have to check the password is really really fast (thanks to the pkzip simple algorithm and the encryption keys I got), like 3 000 000 passwords/s...so i may find the way like this.

The more i learn from all of this, the more i find it interesting as IT knowledge, it's an area i didn't know at all before ;-).


Avatar
dipeperon

Status: n/a
Joined: Tue, 03 Apr 2018
Posts: 321
Team:
Reputation: 388 Reputation
Offline
Sun, 24 Feb 2019 @ 21:06:56

temuag said:

I forgot to reply you: thanks dipeperon for these informations.

Last question: if I wanna buid my own dictionary with my own rules, to include several words combination of a french dictionary + mutations of these words, what would be the best way?

Now: I have a french dictionary but as my password must be a passphrase that includes several words, i'd like to check all the 2, 3 or 4 words possibilities of this dictionary, including mutations with capital letters, and replacement of O by 0, A by 4...

Because the software I have to check the password is really really fast (thanks to the pkzip simple algorithm and the encryption keys I got), like 3 000 000 passwords/s...so i may find the way like this.

The more i learn from all of this, the more i find it interesting as IT knowledge, it's an area i didn't know at all before ;-).

That are l33tspeak rules, there's rules out there that already have that functionality

Combining words into a passphrase is possible, I recommend using princeprocessor for that.

edit: The prince_optimized.rule that comes with Prince already has l33tspeak rules


My haschat stuff (rules, scripts): https://github.com/theherp/Hashcat-stuff
BTC: 3C2h4xscGRq7XfZLicoVjRVkYrqqJ1Urc5

Avatar
temuag

Status: n/a
Joined: Sat, 09 Feb 2019
Posts: 9
Team:
Reputation: 0 Reputation
Offline
Mon, 25 Feb 2019 @ 18:21:07

Thanks for the info!

But as far as I understood, Prince Pocessor works with Hashcat, am I wrong?

Would I be able to use it with a wordlist as an input, and thanks to the rules, get an output wordlist with all the mutations, and then use this second wordlist as a dictionary in my zip tool? Because basically, it's what I need, building a second wordlist with mutations and multiple words based on the french dictionary.

Sorry if i'm asking stupid question, i am such a beginner in that area.

Thanks again for your time!


Avatar
temuag

Status: n/a
Joined: Sat, 09 Feb 2019
Posts: 9
Team:
Reputation: 0 Reputation
Offline
Tue, 26 Feb 2019 @ 11:45:05

It's alright, I got my answers myself.
Topic can be closed, thanks!



12 Results - Page 1 of 1 -
1

We have a total of 175952 messages in 21922 topics.
We have a total of 20074 registered users.
Our newest registered member is dominator.