john-users - Zip file assistance

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <0e5901db7505$a561d4e0$f0257ea0$@us>
Date: Sat, 1 Feb 2025 18:01:44 -0600
From: "Scott Techlist" <techlist06@...a.us>
To: <john-users@...ts.openwall.com>
Subject: Zip file assistance

I am using:

JTR jumbo compiled for windows (1.9.0-jumbo-1 64-bit Windows)

Johnny Windows GUI (2.2)

I have a couple of zip files I password protected several years ago, almost surely created with PKZip, file dates 2009 and 2015 , I've forgotten the tail end of what I am confident is a 1 word password.  I have a high confidence in knowing the first 10 characters of the password, with the remainder probably up to 8 numbers.

Using Johnny I have opened an "other file format" password file, chose "zip" as file format, specified where to save the hashes, entered the zip file with the issue, and chosen "convert".  That creates the file I entered, and I see what I believe is a single hash in the target file.

In the GUI, I enter a value for "guess password" 

Finally, I choose Start new attack.

The command line generated is apparently:

C:/Users/scott/Downloads/john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/john.exe --format=PKZIP --mask= --session=C:/Users/scott/.john/sessions/02-01-25-17-34-36 C:/Users/scott/pw.lst

Console reports:

Using default input encoding: UTF-8

Loaded 1 password hash (PKZIP [32/64])

Will run 8 OpenMP threads

Using default mask: ?1?2?2?2?2?2?2?3?3?3?3?d?d?d?d

Press 'q' or Ctrl-C to abort, almost any other key for status

When running form a cmd line, pressing a key gives a status message like:

0g 0:00:00:14  0g/s 13628Kp/s 13628Kc/s 13628KC/s Cz5p4eaaaaa1111..Q7oj4eaaaaa1111

I see john-avx.exe CPU and disk usage in Task Manager.

My questions are:

1) Does this look like the correct procedure and resulting command line for my single zip file password retrieval?  

2) Is there anything I can do to improve my command?  Particularly since I know the start of the password.  

3) Any estimate on how long this would take with this single word password?

Grateful for any help.  Thank you

Scott

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.