
u – Try to decompress with the detected possible archive passwords using unzip (This is necessery to precisely find the archive password, otherwise it will just print out a number of possible matching archive passwords and you have to try each of the passwords one by one.

Here are the options passed on to the above fcrackzip command: Of course the sample set password for noradi.zip is pretty trivial and with more complex passwords, sometimes cracking the password can take up to 30 minutes or an hour and it all depends on the specific case, but at least now we the free software users have a new tool in the growing arsenal of free software programs 😉

Linux:~# time fcrackzip -u -b -c a -p aaaaaa noradi.zip To find out which of these passwords is the right one either try them outĬracking the noradi.zip password protected sample file on my dual core 1.8 ghz box with 2gb, it took 30 seconds. Which will take between one and thirty minutes on typical machines. Password has 6 lower case characters, and fcrackzip will find it (and a There is a web page with more information atĪ sample password-protected. Linux:~# cat /usr/share/doc/fcrackzip/READMESee fcrackzip.txt (which is derived from the manpage), or fcrackzip.html On Debian it's worthy to have a quick look on the README file: An example scenario would be downloading a huge words dictionary (a rainbow tables) dictionary etc., which was protected by the author with a password and zipped.įortunately Mark Lehmann developed a software called fcrackzip which is capable of brute forcing zip protected file passwords straight on UNIX like operating systems (GNU/Linux, FreeBSD).įcrackzip is available from package repositories on Debian and Ubuntu Linuces to install via apt:įcrackzip is also available on FreeBSD via the ports tree and can be installed with:įreebsd# cd /usr/ports/ security/fcrackzip Its not very common, but sometimes it happens you have to crack some downloaded file from or some other big torrent tracker.
