https://github.com/cwithmichael/zip-attack
A port of the cwithmichael/zip-blitz program to Clojure.
https://github.com/cwithmichael/zip-attack
clojure pkzip zip zipcrypto
Last synced: 2 days ago
JSON representation
A port of the cwithmichael/zip-blitz program to Clojure.
- Host: GitHub
- URL: https://github.com/cwithmichael/zip-attack
- Owner: cwithmichael
- License: mit
- Created: 2022-05-01T01:12:06.000Z (about 4 years ago)
- Default Branch: main
- Last Pushed: 2022-05-17T13:13:07.000Z (about 4 years ago)
- Last Synced: 2025-02-22T13:42:45.246Z (over 1 year ago)
- Topics: clojure, pkzip, zip, zipcrypto
- Language: Clojure
- Homepage:
- Size: 642 KB
- Stars: 0
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Zip Attack
## Motivation
This program was created for a very specfic problem I had. I had a large encrypted zip file that I lost/forgot the password for. Using traditional bruteforce methods resulted in a lot of false positives.
This program hopes to minimize false positives. It works by actually checking to see if a given file type exists in the 'plaintext' after attempting a guess password.
## Usage
Let's say we had an encrypted zip file named `cats.zip` with a jpg file in it.
In this example the password is `fun` and our wordlist contains `fun`.
Build the uber jar:
```bash
$ clj -T:build uber
```
Run the program:
```bash
$ java -jar ./target/zip-attack-0.0.1-standalone.jar ./test/com/cwithmichael/cats.zip kitten.jpg < wordlist
Found it! -> fun
```
We can also use a password generator like JohnTheRipper to provide passwords.
```bash
$ ./JohnTheRipper/run/john --mask=fu?a -stdout | java -jar ./target/zip-attack-0.0.1-standalone.jar ./test/com/cwithmichael/cats.zip kitten.jpg
Press 'q' or Ctrl-C to abort, almost any other key for status
95p 0:00:00:00 100.00% (2020-04-13 17:35) 1520p/s fu|
Found it! -> fun
```
## Important Notes
Supports PKZip/ZipCrypto Encryption _only_
Only a limited number of file types are supported at the moment: zip, wmv/asf/wma, jpg, png, xml
But it's pretty easy to extend support for various file types.