john-users - use data from known password zipfile created by the same machine/user?

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Mon, 28 Dec 2020 18:03:53 -0800
From: Jeff Johnson <echo5juliet@...il.com>
To: john-users@...ts.openwall.com
Subject: use data from known password zipfile created by the same machine/user?

Hello,

I have two zip files I created on the same machine. One password I know,
the other I have lost. I have created zip2john hash files for both zip
files. File1.zip I know the password for. File2.zip I don't.

Is it possible to gather any kind of hash result or salt from processing
the File1.zip file that will aid jtr in figuring out File2.zip easier?

File1.zip password is very similar to: 1Jump.H1gh3r
It's highly likely I used similar kinds of letter replacement for File2.zip

I tried:
./john File2.hash
and
./john --wordlist=rockyou.txt --rules:All File2.hash

If it lends any clues to a good method or approach to take the File2.hash
starts like this:
File2.zip:$pkzip2$3*2*1*0*8*24*40ce*92f4*

I feel like I am not approaching this in a smart method.

Any help is appreciated.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.