kali 使用John破解zip压缩包的密码

kali  使用John破解zip压缩包的密码

准备工具：

1. zip压缩包带密码   1个
2. kali Linux机器       1个

操作步骤：

1. 首先将压缩包上传至kali机器，然后使用zip2john命令爆出hash文件

[root@kali-hsun test]# zip2john license.zip >> passwd.txt
license.zip/license/ is not encrypted!
ver 1.0 license.zip/license/ is not encrypted, or stored with non-handled compression type
ver 2.0 efh  license.zip/license/license.dat PKZIP Encr: cmplen=, decmplen=, crc=5ED111EF
ver 2.0 efh  efh  license.zip/license/licenseʺ³ɵٖ·.txt PKZIP Encr: 2b chk, TS_chk, cmplen=, decmplen=, crc=A6269FCE
NOTE: It is assumed that all files in each archive have the same password.
If that is not the case, the hash may be uncrackable. To avoid this, use
option -o to pick a file at a time.

　　2.然后使用john命令，计算hash文件

[root@kali-hsun test]# john passwd.txt
Warning: invalid UTF- seen reading passwd.txt
Using default input encoding: UTF-
Loaded  password hash (ZIP, WinZip [PBKDF2-SHA1 / SSE2 4x])
Will run  OpenMP threads
Proceeding with single, rules:Wordlist
Press 'q' or Ctrl-C to abort, almost any other key for status
Almost done: Processing the remaining buffered candidate passwords, if any
Warning: Only  candidates buffered for the current salt, minimum
needed for performance.
Proceeding with wordlist:/usr/share/john/password.lst, rules:Wordlist
123321           (license.zip/license/license.dat)
1g ::: DONE / (-- :) .5780g/s 16544p/s 16544c/s 16544C/s ..Open
Use the "--show" option to display all of the cracked passwords reliably
Session completed

注意，该行前边的内容即为压缩包的密码

本文来自吾爱破解论坛

https://www.52pojie.cn/thread-984024-1-1.html
https://www.bilibili.com/video/av57617949/