https://github.com/Aloxaf/rbkcrack

Crack legacy zip encryption with Biham and Kocher's known plaintext attack. 使用明文攻击破解加密的 zip 文件
https://github.com/Aloxaf/rbkcrack

Last synced: 3 months ago
JSON representation

Crack legacy zip encryption with Biham and Kocher's known plaintext attack. 使用明文攻击破解加密的 zip 文件

• Host: GitHub
• URL: https://github.com/Aloxaf/rbkcrack
• Owner: Aloxaf
• License: other
• Fork: true (kimci86/bkcrack)
• Created: 2018-09-30T12:49:11.000Z (about 6 years ago)
• Default Branch: master
• Last Pushed: 2023-03-06T22:05:33.000Z (over 1 year ago)
• Last Synced: 2024-05-31T09:37:06.226Z (5 months ago)
• Language: Rust
• Homepage:
• Size: 1.92 MB
• Stars: 95
• Watchers: 7
• Forks: 18
• Open Issues: 17
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-hacking-lists - Aloxaf/rbkcrack - Crack legacy zip encryption with Biham and Kocher's known plaintext attack. 使用明文攻击破解加密的 zip 文件 (Rust)

README

        
rbkcrack

=======

Crack legacy zip encryption with Biham and Kocher's known plaintext attack.

(Fork from bkcrak.)

[![CI](https://github.com/Aloxaf/rbkcrack/workflows/CI/badge.svg)](https://github.com/Aloxaf/rbkcrack/actions?query=workflow%3ACI)

[![Linux build status](https://travis-ci.org/Aloxaf/rbkcrack.svg)](https://travis-ci.org/Aloxaf/rbkcrack)

[![Dependabot Status](https://api.dependabot.com/badges/status?host=github&repo=Aloxaf/rbkcrack)](https://dependabot.com)

Difference from bkcrack

-----------------------

Not much, except that rbkcrack supports ZIP64 file (thanks to zip-rs crate).

In most cases, using bkcrack is a better choice.

Because I haven't fully test rbkcrack, it's just a toy for practicing Rust.

Download

--------

Get the latest version from the [git repository](https://github.com/Aloxaf/rbkcrack).

Install

-------

Build and install it with [Cargo](https://doc.rust-lang.org/cargo).

```shell

RUSTFLAGS='-C target_cpu=native' cargo install --git https://github.com/Aloxaf/rbkcrack

```

Usage ([中文版](https://github.com/Aloxaf/rbkcrack/blob/master/README_CN.md))

-----

### Data required

The attack uses at least 12 bytes of contiguous plaintext.

The larger the known plaintext, the faster the attack.

#### From zip archives

Having a zip archive `encrypted.zip` with the entry `cipher` being the ciphertext and `plain.zip` with the entry `plain` as the known plaintext, rbkcrack can be run like this:

    rbkcrack -C encrypted.zip -c cipher -P plain.zip -p plain

Or use `-a` option to let rbkcrack search entry automatically

    rbkcrack -C encrypted.zip -P plain.zip -a

#### From files

Having a file `cipherfile` with the ciphertext (starting with the 12 bytes corresponding to the encryption header) and `plainfile` with the known plaintext, rbkcrack can be run like this:

    rbkcrack -c cipherfile -p plainfile

#### Offset

If the plaintext corresponds to a part other than the beginning of the ciphertext, you can specify an offset.

It can be negative if the plaintext includes a part of the encryption header.

    rbkcrack -c cipherfile -p plainfile -o offset

### Decipher

If the attack is successful, the deciphered text can be saved:

    rbkcrack -c cipherfile -p plainfile -d decipheredfile

If the keys are known from a previous attack, it is possible to use rbkcrack to decipher data:

    rbkcrack -c cipherfile -k 12345678 23456789 34567890 -d decipheredfile

### Decompress

The deciphered data might be compressed depending on whether compression was used or not when the zip file was created.

If deflate compression was used, a Python 3 script provided in the `tools` folder may be used to decompress data.

    tools/inflate.py < decipheredfile > decompressedfile

You can also use `-u` option to enable decompress

    rbkcrack -C encrypted.zip -c cipher -P plain.zip -p plain -d final -u

**[Suggested]** If you want to decipher and decompress the whole file, you can use my custom [p7zip](https://github.com/Aloxaf/p7zip):

    7za e cipher.zip '-p[d4f34b9d_a6ba3461_dcd97451]'

Learn

-----

A tutorial is provided in the `example` folder.

For more information, have a look at the documentation and read the source.

Contribute

----------

Do not hesitate to suggest improvements or submit pull requests on [github](https://github.com/Aloxaf/rbkcrack).

BTW, if there is any zip file which bkcrack/pkcrack can crack while rbkcrack can't,

please don't hesitate to report it. 

License

-------

This project is provided under the terms of the [zlib/png license](http://opensource.org/licenses/Zlib).