Questions tagged [zip]
An archive file format that is used to bundle multiple files and folders together that may have been compressed.
19
questions
132
votes
11
answers
189k
views
Are password-protected ZIP files secure?
Following my answer. If I can list contents of a password-protected ZIP file, check the file types of each stored file and even replace it with another one, without actually knowing the password, then ...
- 3,629
36
votes
4
answers
34k
views
Can password-protected zip files be broken without brute force?
You have a zip file that you created with 7z to password-protect it with AES 128. Can a smart adversary extract the data only through brute force, or is the file vulnerable to other attacks - such as, ...
- 3,089
11
votes
2
answers
6k
views
Is it easier to crack a ZIP file than a 7z archived file given they have the same password?
I am interested in knowing if either of them is easier to crack than the other because of inherent flaws.
56
votes
5
answers
406k
views
How to recover a lost zip file password?
I have some files I was given by my teacher at University, I could chase him up, but I may as well try getting blood from a stone, his response rate isn't great and I completed my degree a year ago!
...
- 681
23
votes
4
answers
9k
views
How is malware distributed within zip files?
Recently it seems there has been a big outbreak of zip files being emailed to people with a .js file containing code that downloads and executes cryptoware.
How does the .js actually get executed ...
- 743
18
votes
1
answer
12k
views
What encryption method is used by the zip program in macOS?
In order to send a file securely I am going to encrypt/password protect a zip file. (Why I am doing this). I am using macOS Sierra 10.12.6 and through my research I have concluded that encrypting a ...
- 670
6
votes
1
answer
7k
views
Encryption Using 7z or Zip File
I'm wondering which encrypted 7-Zip file format has better encryption: 7z with 256 AES or zip file with 256 AES? Assume that a strong password is used, then which encrypted 7zip file format has ...
- 87
4
votes
2
answers
3k
views
How does a zip file detect a correct password?
When extracting files from an encrypted zip archive, the user is asked to give a password in order to read the original file.
How does an encrypted ZIP detect when the user has given the correct ...
- 579
1
vote
2
answers
7k
views
Is it risky to download but not use a zip file?
Is there any possibility of malware infection in Windows 10 for the following three situations:
When you download a zipped file, but do not use it (you do not open it)?
When you only open a zipped ...
- 493
11
votes
1
answer
13k
views
How zip symlink works?
I've seen lately some bugs that used zip symlink technique , can anyone explain how this vulnerability works , how attackers use it to exploit applications?
Thanks
- 1,452
8
votes
2
answers
2k
views
How can I tell if a zip file uses the 7-Zip exploit?
Let's say I have a "corrupted" zip file from a potentially suspicious source, and that at least one person has attempted to extract it. Conventional wisdom used to be that bad stuff™ didn't ...
- 2,599
8
votes
1
answer
3k
views
How to protect websites against ZIP bombs and reference bombs?
A Zip bomb (concept here) seems quite a "smart" and easy vulnerability to websites where uploading ZIP files is allowed. Such sites are under a threat (at least to make some degree of damage to them) -...
- 2,727
7
votes
3
answers
9k
views
Is it safe to click on zip or rar file? [duplicate]
Sometimes I'm in dilemma when I want to open archive file if there is any risk by opening it, because I'm not sure if attacker can use any trick that will trigger malware just by clicking on it.
I'm ...
- 1,328
6
votes
2
answers
4k
views
Is storing an encrypted zip file to an insecure cloud service an admissible way of securing privacy?
Consider the following scenario:
I use a cloud service that is not considered secure (meaning no encryption whatsoever) i.e. Dropbox, OneDrive, Google Drive etc. In my account I have a .zip or .7z ...
- 329
4
votes
2
answers
5k
views
What are some possible uses of a zip bomb?
This article claims that zip bombs cannot be used today as modern systems are too smart for it and no victim is going to slowly unpack terrabytes of data so zip bombs are basically useless.
Is this ...
- 41
2
votes
2
answers
11k
views
How to recover a lost zip file password (Extract Zip Spec '2.0')
I want to recover my backup file, but I can't find the password. The password contains 12-20 characters (As!@$123)
user@PC:/media/user/MyData$ zipdetails -v backup2.zip
0000000 0000004 50 4B 03 04 ...
- 41
1
vote
2
answers
1k
views
Various questions about file compression and encryption regarding hacking (zip, rar, 7z) [closed]
So I'm curious about a few aspects of compressed files (Zip, rar, 7z, etc), and how they impact hack-ability. There is enough on this subject that I'm not clear about (since this isn't a career of ...
- 19
1
vote
0
answers
673
views
Recovery of files from a zip containing a directory (unencrypted) and 3 files (encrypred - ZipCrypto Deflate), possibe use of bkcrack?
I have a zip file, Example.zip consisting of a directory Example and three files *.dat. I can see the names of all 3 files. The dat files are encrypted (ZipCrypto Deflate). I'm interested to know if I ...
- 111
1
vote
1
answer
2k
views
Can unpacking a .zip file be harmful for Unix-like systems?
Let’s say there is a .zip file that contains either a virus, malware or something harmful for the computer.
The computer is running a Unix-like OS, e.g. Ubuntu 18.04.
Are there any security ...
- 151