I have used
zip2john to get the hash for a zip file like that:
zip2john.exe myfile.zip > hash.txt
john told me:
ver 2.0 myfile.zip/SomeDir/SomeFile.itv PKZIP Encr: cmplen=11813, decmplen=20364, crc=9CA2F026 ver 2.0 myfile.zip/packageInfo.plist PKZIP Encr: cmplen=390, decmplen=433, crc=5B49A74F Note: It is assumed that all files in each archive have the same password. If that is not the case, the hash may be uncrackable. To avoid this, use option -o to pick a file at a time.
To do that, I have used:
zip2john.exe -o SomeDir/SomeFile.itv myfile.zip > hash.txt
Then I tried the following command to search for the pass:
john.exe myfile.zip hash.txt
john told me:
Warning: Invalid UTF-8 seen reading myfile.zip Warning: detected hash type "HMAC-SHA256", but the string is also recognized as "HMAC-SHA512" Use the "--format=HMAC-SHA512" option to force loading these as that type istead Warning: only loading hashes of type "HMAC-SHA256", but also saw type "PKZIP" Use the "--format=PKZIP" option to force loading hashes of that type instead.
I could open the zip file in 7zip, so I assumed that I should go with "PKZIP".
I am now using the following command to search for the pass:
john.exe myfile.zip hash.txt --format=PKZIP
I have opened the
hash.txt file, and there is a huge string in it.
Its length it over 23.000 characters.
It starts with
and ends with
Is the length of over 23.000 characters normal?
I thought hashes were rather short.
Edit: I didn't expect that in this case, multiple hashes are involved. Had I know this, I would have posted the entire contents of hash.txt.
The is the full contents of "hash.txt":