Short Summary

Cracking a password protected zip file on Kali Linux Zip file cracking tools Both the fcrackzip utility and John the Ripper can be used to crack password protected zip files. You can try both of them or just your preferred tool. Quick Tutorial: Crack zip password using fcrackzip in Kali Linux by admin Updated April 29, 2021 fcrackzip is a tool used to identify passwords of zip file. This tool works on simple concept of bruteforce. It is a GUI frontend for password cracking and brute force attack tool which can be used for wide range of situation, including authentication based. This hacking tool was introduced by Van Hauser from The Hacker’s Choice and David Maciejak. It uses a dictionary attack or brute force methods to test for simple or weak passwords. Cracking password in Kali Linux using John the Ripper John the Ripper is a free password cracking software tool. Initially developed for the Unix operating system, it now runs on fifteen different platforms (eleven of which are architecture-specific versions of Unix, DOS, Win32, BeOS, and OpenVMS). In this tutorial I show you how to create a password protected zip file and then crack it using fcrackzip within Kali. Command to type in terminal. Fcrackzip -b -c 'aA1!' -l 1-10 -u filename.zip. By using a simple Linux terminal and command you can easily crack the Zip password, you can download FCrackZip from your software manager.

Hello Friends! Today In this tutorial I’m going to show you that How can you crack Linux User password, Zip, Rar, Windows User Password etc. by using a simple tool known as JohnTheRipper tool. This tool is very useful for cracking any type of password and by this you can crack MD5 Hashes also.

Cracking of password is depends on your computer processor, RAM etc. It’s very interesting feature is that it can autodetect the format of the password hashes and decrypt password. It can decrypt the password by auto detecting the format of the encryption which is used in the password.

ALSO READ:- How to Create a Phishing Page & do Phishing attack Step by step Tutorial Part 1

Firstly, we are going to install John the ripper tool in your Kali by typingsudo apt-get install john in your terminal and if you are using another platform like windows then you can download it via clicking here. After installing it just typejohn and then this tool will open like this.

Now, we are going to crack our Linux password. Firstly, you have to understand that where Linux save its users password? Linux saves its users password inside the shadow file which is present in the root/etc/shadow. For cracking Linux user password just type john /etc/shadowthen it will start cracking the password and this is depending on your password difficulty.

Now, I’m going to show you how to crack windows User password by using a johntheripper tool. So, Friends windows has saved it’s users password in SAM folder and you will found it C:WindowsSystem32configSAM. It’s a Windows file so you can’t copy it directly. But by using command prompt you can access it and take this file in your Kali Linux. So, just open your command prompt and type cd & then type cdUsersgauravDesktop.

Now you come to your Desktop. Here, type reg save hklmSYSTEM SYSTEM. This command will take this system file to your desktop. You can also see here.

After this typereg save hklmSAM SAM. So, this command will save this SAM file also on your desktop. Now, you can use it for the crack User password.

Just copy both of these files and save it to your Kali Linux. After saving to the desktop Just type samdump2 SYSTEM SAM>windowspassword.txt This command will save this password hashes in a text file and at the end I give the name of the file in which I have to save it. You can give any name to it.

As you can see here I have a text file in which password hashes are saved. So, Now we are going to crack the password of any user just type john –format=LM –user=Administrator windowspassword.txtthen it will start cracking the password of Administrator only. In my case, it is not cracking because I don’t have any password.

If you have to crack any password by using wordlist then typejohn –wordlist=rockyou.txt –user=Administrator windowspassword.txt So, now it will start Brute Forcing Attack on this Administrator password. Firstly, I type john to call John and then I type wordlist it means we need wordlist scan and = means path then wordlist path then I type –user=Administrator. It shows the password is crack only for Administrator. then the text file name.

ALSO READ:- What is Steganography and How to do Steganography?

If you want to crack zip file passwords use fcrackzip.fcrackzip is a fast password cracker partly written in assembler. It is able to crack password protected zip files with brute force or dictionary based attacks, optionally testing with unzip its results.

Install fcrackzip in Ubuntu

sudo aptitude install fcrackzip

This will complete the installation.

Fcrack Syntax

Kali Crack Zip Password John

fcrackzip [-bDBchVvplum2] [--brute-force] [--dictionary] [--benchmark] [--charset characterset] [--help] [--validate] [--verbose] [--init-password string/path] [--length min-max] [--use-unzip] [--method name] [--modulo r/m] file.

fcrack Options

-h, –help
Prints the version number and (hopefully) some helpful insights.
-v, –verbose
Each -v makes the program more verbose.
-b, –brute-force
Select brute force mode. This tries all possible combinations of the letters you specify.
-D, –dictionary
Select dictionary mode. In this mode, fcrackzip will read passwords from a file, which must contain one password per line and should be alphabetically sorted (e.g. using (1)).
-c, –charset characterset-specification
Select the characters to use in brute-force cracking. Must be one of

a include all lowercase characters [a-z]
A include all uppercase characters [A-Z]
1 include the digits [0-9]
! include [!:$%&/()=?[]+*~#]
: the following characters upto the end of the spe-
cification string are included in the character set.
This way you can include any character except binary
null (at least under unix).

For example, a1:$% selects lowercase characters, digits and the dollar and percent signs.

-p, –init-password string
Set initial (starting) password for brute-force searching to string, or use the file with the name string to supply passwords for dictionary searching.
-l, –length min[-max]
Use an initial password of length min, and check all passwords upto passwords of length max (including). You can omit the max parameter.
-u, –use-unzip
Try to decompress the first file by calling unzip with the guessed password. This weeds out false positives when not enough files have been given.
-m, –method name
Use method number “name” instead of the default cracking method. The switch –help will print a list of available methods. Use –benchmark to see which method does perform best on your machine. The name can also be the number of the method to use.
-2, –modulo r/m
Calculate only r/m of the password. Not yet supported.
-B, –benchmark
Make a small benchmark, the output is nearly meaningless.
-V, –validate
Make some basic checks wether the cracker works.

fcrackzip Examples

fcrackzip -c a -p aaaaaa sample.zip

checks the encrypted files in sample.zip for all lowercase 6 character passwords (aaaaaa … abaaba … ghfgrg … zzzzzz).

Crack Zip Password Kali Windows 10

fcrackzip --method cpmask --charset A --init AAAA test.ppm

checks the obscured image test.ppm for all four character passwords. -TP fcrackzip -D -p passwords.txt sample.zip check for every password listed in the file passwords.txt.

Crack Zip Password Using Kali Linux

Crack Zip Pass Kali

Related content: