使用pkcrack破解ZIP 2.0

时间:2015-08-24 20:49:21

标签: encryption zip cracking winzip

我一直试图进入一个旧的ZIP存档,我仍然有一些文件,但我有一些问题,了解这一切是如何工作的。我相信我有正确的明文,但它不知何故不起作用。看看下面的数据,我通过安装旧版WinZIP(8.1)获得了明文。

旧的加密文件:

part number in which file begins (00):          part 1
relative offset of local header:                0 (0x00000000) bytes
version made by operating system (00):          MS-DOS, OS/2, NT FAT
version made by zip software (20):              2.0
operat. system version needed to extract (00):  MS-DOS, OS/2, NT FAT
unzip software version needed to extract (20):  2.0
general purpose bit flag (0x0001) (bit 15..0):  0000.0000 0000.0001
  file security status  (bit 0):                encrypted
  extended local header (bit 3):                no
compression method (08):                        deflated
  compression sub-type (deflation):             normal
file last modified on (0x000034f2 0x00004e10):  2006-jul-26 16:23:11
32-bit CRC value:                               0xed656c30
compressed size:                                944826 bytes
uncompressed size:                              954936 bytes
length of filename:                             12 characters
length of extra field:                          0 bytes
length of file comment:                         0 characters
internal file attributes:                       0x0000
  apparent file type:                           binary
external file attributes:                       0x00000020
  non-MSDOS external file attributes:           0x000000
  MS-DOS file attributes (0x20):                arc
Current Location part 1 offset 2691065
filename:Photo001.JPG
Current Location part 1 offset 2691087
Central directory entry PK0102 (4+42): #2

更新的明文:

    part number in which file begins (00):          part 1
    relative offset of local header:                1746047 (0x001aa47f) bytes
    version made by operating system (00):          MS-DOS, OS/2, NT FAT
    version made by zip software (20):              2.0
    operat. system version needed to extract (00):  MS-DOS, OS/2, NT FAT
    unzip software version needed to extract (20):  2.0
    general purpose bit flag (0x0000) (bit 15..0):  0000.0000 0000.0000
      file security status  (bit 0):                not encrypted
      extended local header (bit 3):                no
    compression method (08):                        deflated
      compression sub-type (deflation):             normal
    file last modified on (0x00004505 0x0000a882):  2014-aug-05 21:04:04
    32-bit CRC value:                               0xed656c30
    compressed size:                                944816 bytes
    uncompressed size:                              954936 bytes
    length of filename:                             12 characters
    length of extra field:                          0 bytes
    length of file comment:                         0 characters
    internal file attributes:                       0x0000
      apparent file type:                           binary
    external file attributes:                       0x81b60020
      non-MSDOS external file attributes:           0x81b600
      MS-DOS file attributes (0x20):                arc
Current Location part 1 offset 2691095
    filename:Photo001.JPG
Current Location part 1 offset 0
Local directory entry PK0304 (4+26): #1

所以从我所看到的有几个不同,但我不认为它们应该重要。外部文件属性应该只在解密后才对吗?并且未压缩的大小和CRC是相同的,因此它应该是完全相同的文件。压缩方法也是一样的。另外我很确定WinZIP用于加密。所以奇怪的是压缩大小的10字节差异。运行pkcrack我被告知“没有找到解决方案。你必须选择错误的明文。”这是不正确的。有谁知道我做错了什么?

PS。如果有人知道如何使用它,我也会从同一档案中的文本文件中获得大约30个字节的明文。文档说只知道文件的一部分就足够了,但我从来没有找到指定如何使用文件的来源。

0 个答案:

没有答案