When I use JtR to crack an encrypted zip file I have, it seems like JtR doesn't go through the wordlist I have ... I do the following steps:

$ brew install john-jumbo
$ export PATH=$PATH:/usr/local/share/john
$ zip2john File.zip > zip_hash.txt
$ john --format=PKZIP --wordlist my_wordlist.txt   zip_hash.txt

It exists right away with this message:

0g 0:00:00:00 DONE (2017-10-30 12:09) 0g/s 3923Kp/s 3923Kc/s 3923KC/s zoo-ecology..zymo- Session completed

While the password is not cracked yet. What am I doing wrong?

UPDATE (contents of the hash file)


P.S. Center.zip is the file name to be cracked.

  • There is a = missing after --wordlist. I also recommend using --rules. Also, are you sure the password is in the wordlist? – Volker Oct 30 '17 at 10:44
  • @Volker, Thanks for the comment ... I added the equal sign and still I have the same problem ... and yes, the file has list of words separated by newlines – securecurve Oct 30 '17 at 10:50
  • I recently ran into a similar problem at a NetWars challenge, thus being fairly sure the password is in the list and no rules are needed as the hints say so. – Tobi Nary Oct 30 '17 at 11:04
  • Yet: OP, it is easy to miss a single cracked password in the first run and John is never telling you again. Did you try --show to see if it has been cracked in a previous run? – Tobi Nary Oct 30 '17 at 11:11
  • @SmokeDispenser .. I use the --show option and it throws: 0 password hashes cracked, 1 left – securecurve Oct 30 '17 at 11:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.