Questions tagged [zip]
An archive file format that is used to bundle multiple files and folders together that may have been compressed.
99 questions
1 vote
1 answer
928 views
John the Ripper doesn't identify hash
I have a ZIP file of my gallery that contains images and videos which is over 5GB in size. I forgot the password for that ZIP file now I'm trying to crack it to extract files from there. I tried using ...
1 vote
2 answers
456 views
How does malware work when compressed?
I have read up on compressed folders of file types such as .zip, .rar and .7zip being the malicious file itself (excluding cases such as an .exe file being disguised as a .zip file etc...), only ...
0 votes
1 answer
242 views
Is ZipSlip possible in Java without two dots?
I'm testing a Java application that tries to prevent ZipSlip by simply checking whether the filename contains ".." or "./" Since it's not a web application, I guess encoding is not ...
- 121
2 votes
1 answer
365 views
John the Ripper - Zip Password help - Latter half digit command advice
I'm trying to use John to recover some old ZIP files with a password I remember half. One half being a word, the latter half being a mix of four to six digits. I remember the word, but not the digits ...
- 21
1 vote
0 answers
2k views
Unable to open multipart zip with john the ripper
I have this multiple-part zip files as a list of {File.zip.001, File.zip.002, ..., File.zip.013} that happen to be protected by password. When I try to unzip them using the Gnome GUI, I see click on ...
- 11
0 votes
1 answer
185 views
How do password protected files differ from keygen protected software?
From some posts I read here: Regarding keygen protected software: As long as the user has full control of the hardware where the software is running on (i.e. typical PC) it is impossible to fully ...
- 3
2 votes
0 answers
646 views
Can unzipping archive by itself cause malware execution? [duplicate]
It it possible to execute a malware just by unzipping a malicious zip archive? Like a malware would target some vulnerability in zip decompression routine. How common such an exploit would be in the ...
- 53
1 vote
1 answer
3k views
john failed to crack .zip file? [duplicate]
I have a .zip file and I want to crack its password using john. first I use zip2john: then I use john for cracking the password: but after 10 seconds, john stop cracking and exit. what's wrong?
- 11
18 votes
1 answer
7k views
Crack 7Z password if I also have the original file
Some of my files have been encrypted by ransomware. I can find some backup of files (unfortunately not all of them). Can I find the password of the 7Z zipped+encrypted files if I also have some of the ...
- 283
1 vote
3 answers
438 views
What is more secure: encrypting individual files in archive or encrypting the archive itself?
I want to secure all files from being decrypted by an unauthorised party. Let's assume we have symmetric crypto with the same IV for each operation. From my perspective, encrypting the whole archive ...
- 113
1 vote
1 answer
1k views
Can I get malware from a .rar file without opening it in Android?
I was on a group with almost 200k people on it in Telegram. One of these members (probably new, his account is now deleted) sent me (and to other people too) a file named "Customer deposit H.rar&...
0 votes
1 answer
243 views
Is checking zip content on another PC enough to prevent data leak?
Let's say I have two kind of files on my Windows desktop - first are files that can be published and shared with other people, second kind is confidential and should remain private. To share files I ...
- 45
1 vote
2 answers
185 views
Site password being used to secure ZIP download, are they storing my password in plaintext?
Recently a utility provider has started to attach a zip file including my bill inside, however, they have secured the zip file using my online web account password. I am not too concerned about ...
- 111
1 vote
1 answer
920 views
zip password cracking with permutation
I have a zip file (.zip created by 7zip v15.10) that I remember the password to (~12 characters long), but it seems I've typed the password wrong while zipping it and now it doesn't open. What are the ...
- 11
2 votes
0 answers
625 views
Zip Slip path traversal and consistent vulnerability checks
According to multiple sources such as snyk and infoq, preventing a "Zip Slip" vulnerability in Java can be achieved by denying writes outside the target directory: String ...
- 121