Use John the Ripper to break Password Protected Zip

Question

I installed kali linux, that comes with John the ripper. I have a password-protected zip file. I'm pretty sure the password is complex. I first convert the zip into a hash:

sudo zip2john FILE_LOCATION > zippedzip.txt

It took around 20 seconds to run that command.

I got this output: Then I try running john on it:

sudo john --format=zip ZIPPEDZIP.TXT_LOCATION

However I keep getting an error:

Using default input encoding: UTF-8
No password hashes loaded (see FAQ)

I'm pretty new to John the ripper, but didn't I already load in a hash?

I then took a look at the FAQ but that confused me.

So next I tried to just run a wordlist through the hash

I used the following wordlist: https://github.com/danielmiessler/SecLists/blob/master/Passwords/Common-Credentials/10-million-password-list-top-100000.txt

So I ran this:

So after trying both methods, I'm not really sure how to crack this zip.

Answer 1

The zip2john command already tells you that the output format in PKZIP, so you should use that format if you decide to explicitly specify it in your john command using the --format switch.

If you omit the --format specifier, john obviously recognizes the format of the hash file correctly.

When you read the output of your john command, you see that the passphrase is not found within the words contained in 10-million-password-list-top-100000.txt.
Your challenge now is to find a wordlist suitable or big enough to actually contain the password.