I found an old bash script that I wrote to conduct a dictionary attack against a 7z file. Thought I would post it and then a few references of better ways of cracking zip passwords:
#!/bin/bash
# The script will conduct a dictionary attack on a 7z file. It will delete the temporary file that it creates when the file fails to extract.
while read line
do
7z x file.7z -p $line &> /dev/null
fileSize = `stat -c %s file.7z
if [ $fileSize -lt 5000 ]; then
rm -f file.txt
else
exit 0
fi
done < dictionary.file
A great blog post about using John the Ripper to crack Zip and rar files is located here.
Another tool that you can use is fcrackzip. Here are a couple of references:
http://allanfeid.com/content/cracking-zip-files-fcrackzip
http://rarcrack.sourceforge.net/
http://linuxers.org/article/how-crack-zip-file-passwords-linux-using-fcrackzip
Twitter: @lokut
This blog is for educational purposes only. The opinions expressed in this blog are my own and do not reflect the views of my employers.
Subscribe to:
Post Comments (Atom)
Test Authentication from Linux Console using python3 pexpect
Working with the IT420 lab, you will discover that we need to discover a vulnerable user account. The following python3 script uses the pex...
-
Here is a quick walk through of GetBoo. The first item that I found was you can harvest the usernames of the existing users that are regist...
-
As I was glancing through the logs of my honeypots I spent some time to look at the following logs. In the past I have just overlooked them...
-
I thought I would work through a few of these web applications provided by OWASP on their broken web applications VM. The first one I th...
-
Today looking at the logs of the honeypots, I became curious based on the whois of the IP Addresses attempting to login to SSH which country...
-
Recently I was doing some scanning with a tool that is available on github called masscan. The tool allows you to configure a configuration...
No comments:
Post a Comment