[Day 12] 2. Cracking ZIP file password using fcrackzip

1. Prepare Your Environment

1. Install

   Copy

   fcrackzip

   :

   • Copy

     fcrackzip

     is pre-installed on most Kali Linux distributions. If not, install it:

     bashCopy
     sudo apt update
     sudo apt install fcrackzip
     

2. Create a Password-Protected ZIP File (Optional):

   • If you want to test on your own ZIP file:

     bashCopy
     zip -e test.zip testfile.txt
     

   • You will be prompted to set a password for the ZIP file.

2. Locate or Create a Wordlist

• Use an Existing Wordlist:

  • Kali Linux includes popular wordlists, like

    Copy

    rockyou.txt

    :

    bashCopy
    /usr/share/wordlists/rockyou.txt
    

    If it’s compressed, decompress it:

    bashCopy
    gunzip /usr/share/wordlists/rockyou.txt.gz
    

• Create a Custom Wordlist (Optional):

  • Generate a small wordlist for testing:

    bashCopy
    crunch 4 4 0123456789 -o custom_wordlist.txt
    

3. Brute Force Attack on ZIP File

1. Run

   Copy

   fcrackzip

   with the wordlist:

   bashCopy
   fcrackzip -u -D -p /path/to/wordlist.txt /path/to/zipfile.zip
   

   • Copy

     -u

     : Test unzipping the file to verify the password.
   • Copy

     -D

     : Use a dictionary attack.
   • Copy

     -p

     : Specify the path to the wordlist.

2. Example Command:

   bashCopy
   fcrackzip -u -D -p /usr/share/wordlists/rockyou.txt test.zip
   

You can use

-v

4. Analyze the Results

• If the password is cracked, it will appear in the output:

  Copy
  PASSWORD FOUND!!!!: pw == <password>
  

Tips:

1. Optimize Wordlists: Use relevant wordlists based on the target ZIP file.
2. Understand ZIP Encryption:
   Copy

   fcrackzip

   works on files encrypted with legacy ZIP algorithms. It may not work on modern ZIP formats (e.g., AES-encrypted ZIPs).
3. Testing Environment: Always use these techniques on files you own or have explicit permission to test.