openwall / john

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs
https://www.openwall.com/john/
Other
10.1k stars 2.08k forks source link

Zip2john trows me a lot of zeros in hash #5497

Closed titomaldad closed 3 months ago

titomaldad commented 3 months ago

Checklist

IMPORTANT

We expect only reports of issues with the latest revision found in this GitHub repository. We do not expect in here, and have little use for, reports of issues only seen in a release or in a distro package.

Attach details about your OS and about john, including:

titomaldad commented 3 months ago

With a zipfile it trows a rare hash of a lot and only zeros https://drive.google.com/file/d/1Hda1v2CWxLdcjTEUjWHsD_zA7tpqYaGJ/view?usp=drivesdk

claudioandre-br commented 3 months ago

I bet you are using old version 1.9 Jumbo 1. It has some issues when dealing with zip files. Please update.

Your hash should look like this:

$ head -c 128 zip-5497.hash 
MOVD4VGB.zip/BRRiP.x264.mkv:$zip2$*0*1*0*e8c3f9322944ff3d*4d17*67dc4a2e*7bb057233984a32685b158c938077963dd18b4bac2f58a102eeff4f8
$ tail  -c 128 zip-5497.hash 
d0884e4c41e453a6c53dd36b64702c5bd6f81d837e6856e59a0d9b01e*693359394a2a747e2991*$/zip2$:BRRiP.x264.mkv:MOVD4VGB.zip:MOVD4VGB.zip

BTW: the hash will be huge.

titomaldad commented 3 months ago

Yes the hash is now correct. Otherwhise i don't know if supposed to crack the password is there for a time 20240624_151155

solardiz commented 3 months ago

Good to know this seems to be working now. I'll close the issue as it's not something we need to track, but please feel free to add comments.