Collaborate Disseminate
I’m using John The Ripper for cracking zip archives under Kali Linux and Ubuntu 22 LTS, and it sometimes works, but sometimes doesn’t. When I prepare a zip archive under Windows, it cracks it perfectly, but sometimes there are files that I… Continue reading Can’t crack specific zip file with John on one OS, but manged to do it on another OS [closed]
I have read up on compressed folders of file types such as .zip, .rar and .7zip being the malicious file itself (excluding cases such as an .exe file being disguised as a .zip file etc…), only requiring the user to open the file in their… Continue reading How does malware work when compressed?
I’m adding password protection/encryption support to a Python package that makes ZIP files (https://github.com/uktrade/stream-zip). I’m opting to not add ZipCrypto support, but instead add WinZip-style AES
From https://www.winzip.com/en/su… Continue reading WinZip AE-2 for small files and AE-1 for larger – how small/how large for each? [closed]
I’m testing a Java application that tries to prevent ZipSlip by simply checking whether the filename contains ".." or "./"
Since it’s not a web application, I guess encoding is not an option. So, how can ZipSlip still h… Continue reading Is ZipSlip possible in Java without two dots?
I’m trying to use John to recover some old ZIP files with a password I remember half. One half being a word, the latter half being a mix of four to six digits.
I remember the word, but not the digits after it, what line of code/command can… Continue reading John the Ripper – Zip Password help – Latter half digit command advice
The world may not be ready, but the .zip Top Level Domain (TLD) is here. It’s a part of the generic TLD category, which was expanded to allow applications for …read more Continue reading This Week in Security: .zip Domains, Zip scanning
I have this multiple-part zip files as a list of {File.zip.001, File.zip.002, …, File.zip.013} that happen to be protected by password.
When I try to unzip them using the Gnome GUI, I see click on the first file and can see everything in… Continue reading Unable to open multipart zip with john the ripper
From some posts I read here:
Regarding keygen protected software:
As long as the user has full control of the hardware where the software is running on (i.e. typical PC) it is impossible to fully protect the software.
Regarding password … Continue reading How do password protected files differ from keygen protected software?
Please forgive me for asking stupid questions. I am honestly not familiar with any of these tools, but I am trying. I just want to unlock a zipped family photo album.
First I install john the ripper, then I ran john album.zip > hash.txt… Continue reading John The Ripper – (Unlocking a zip file.)
To test a security mechanism, I need to change the "Last Modified" datetime of an encrypted file and see what happens if I do that.
I can use a tool like BulkFileChanger to modify a file’s "Last Modified" datetime, but … Continue reading How do I edit a "Modified" datetime of an encrypted file within a zip file?