kali 使用John破解zip压缩包的密码

准备工具：

zip压缩包带密码 1个
kali Linux机器 1个

操作步骤：

首先将压缩包上传至kali机器，然后使用zip2john命令爆出hash文件

[root@kali-hsun test]# zip2john license.zip >> passwd.txt

license.zip/license/ is not encrypted!

ver 1.0 license.zip/license/ is not encrypted, or stored with non-handled compression type

ver 2.0 efh  license.zip/license/license.dat PKZIP Encr: cmplen=, decmplen=, crc=5ED111EF

ver 2.0 efh  efh  license.zip/license/licenseʺ³ɵٖ·.txt PKZIP Encr: 2b chk, TS_chk, cmplen=, decmplen=, crc=A6269FCE

NOTE: It is assumed that all files in each archive have the same password.

If that is not the case, the hash may be uncrackable. To avoid this, use

option -o to pick a file at a time.

　　2.然后使用john命令，计算hash文件

[root@kali-hsun test]# john passwd.txt

Warning: invalid UTF- seen reading passwd.txt

Using default input encoding: UTF-

Loaded  password hash (ZIP, WinZip [PBKDF2-SHA1 / SSE2 4x])

Will run  OpenMP threads

Proceeding with single, rules:Wordlist

Press 'q' or Ctrl-C to abort, almost any other key for status

Almost done: Processing the remaining buffered candidate passwords, if any

Warning: Only  candidates buffered for the current salt, minimum

needed for performance.

Proceeding with wordlist:/usr/share/john/password.lst, rules:Wordlist

123321           (license.zip/license/license.dat)

1g ::: DONE / (-- :) .5780g/s 16544p/s 16544c/s 16544C/s ..Open

Use the "--show" option to display all of the cracked passwords reliably

Session completed

注意，该行前边的内容即为压缩包的密码

本文来自吾爱破解论坛

https://www.52pojie.cn/thread-984024-1-1.html
https://www.bilibili.com/video/av57617949/