我一直试图进入一个旧的ZIP存档,我仍然有一些文件,但我有一些问题,了解这一切是如何工作的。我相信我有正确的明文,但它不知何故不起作用。看看下面的数据,我通过安装旧版WinZIP(8.1)获得了明文。
旧的加密文件:
part number in which file begins (00): part 1
relative offset of local header: 0 (0x00000000) bytes
version made by operating system (00): MS-DOS, OS/2, NT FAT
version made by zip software (20): 2.0
operat. system version needed to extract (00): MS-DOS, OS/2, NT FAT
unzip software version needed to extract (20): 2.0
general purpose bit flag (0x0001) (bit 15..0): 0000.0000 0000.0001
file security status (bit 0): encrypted
extended local header (bit 3): no
compression method (08): deflated
compression sub-type (deflation): normal
file last modified on (0x000034f2 0x00004e10): 2006-jul-26 16:23:11
32-bit CRC value: 0xed656c30
compressed size: 944826 bytes
uncompressed size: 954936 bytes
length of filename: 12 characters
length of extra field: 0 bytes
length of file comment: 0 characters
internal file attributes: 0x0000
apparent file type: binary
external file attributes: 0x00000020
non-MSDOS external file attributes: 0x000000
MS-DOS file attributes (0x20): arc
Current Location part 1 offset 2691065
filename:Photo001.JPG
Current Location part 1 offset 2691087
Central directory entry PK0102 (4+42): #2
更新的明文:
part number in which file begins (00): part 1
relative offset of local header: 1746047 (0x001aa47f) bytes
version made by operating system (00): MS-DOS, OS/2, NT FAT
version made by zip software (20): 2.0
operat. system version needed to extract (00): MS-DOS, OS/2, NT FAT
unzip software version needed to extract (20): 2.0
general purpose bit flag (0x0000) (bit 15..0): 0000.0000 0000.0000
file security status (bit 0): not encrypted
extended local header (bit 3): no
compression method (08): deflated
compression sub-type (deflation): normal
file last modified on (0x00004505 0x0000a882): 2014-aug-05 21:04:04
32-bit CRC value: 0xed656c30
compressed size: 944816 bytes
uncompressed size: 954936 bytes
length of filename: 12 characters
length of extra field: 0 bytes
length of file comment: 0 characters
internal file attributes: 0x0000
apparent file type: binary
external file attributes: 0x81b60020
non-MSDOS external file attributes: 0x81b600
MS-DOS file attributes (0x20): arc
Current Location part 1 offset 2691095
filename:Photo001.JPG
Current Location part 1 offset 0
Local directory entry PK0304 (4+26): #1
所以从我所看到的有几个不同,但我不认为它们应该重要。外部文件属性应该只在解密后才对吗?并且未压缩的大小和CRC是相同的,因此它应该是完全相同的文件。压缩方法也是一样的。另外我很确定WinZIP用于加密。所以奇怪的是压缩大小的10字节差异。运行pkcrack我被告知“没有找到解决方案。你必须选择错误的明文。”这是不正确的。有谁知道我做错了什么?
PS。如果有人知道如何使用它,我也会从同一档案中的文本文件中获得大约30个字节的明文。文档说只知道文件的一部分就足够了,但我从来没有找到指定如何使用文件的来源。