Update writeup.md
This commit is contained in:
@@ -1 +1,19 @@
|
||||
Here
|
||||
We are given a password protected zip file for the challenge Chef.
|
||||
|
||||
To crack the password, we can attempt to guess it. However, that can take a long time. Instead, we can use a tool called **John The Ripper**. John The Ripper is a tool that can be used to crack passwords. We will be using ``john`` and sub module called ``zip2john``.
|
||||
|
||||
First, we will run the command ``zip2john TopSecret.zip > myzip`` as seen in the following screenshot. Running this command will covert it into a format that can be cracked using John The Ripper.
|
||||
|
||||
![[images/cimg-1]]
|
||||
|
||||
Once done, we can use any wordlist. In this example, we will be using ``rockyou.txt`` which can be found in the ``/usr/share/wordlists/rockyou.txt`` if you are using Kali Linux. You may choose your own wordlist for this challenge. The command will be:
|
||||
|
||||
```
|
||||
john --wordlist=/usr/share/wordlists/rockyou.txt myzip
|
||||
```
|
||||
|
||||
Command breakdown:
|
||||
- ``--wordlist=/usr/share/wordlists/rockyou.txt`` - Specifies the wordlist that John The Ripper will use.
|
||||
- ``myzip`` - Specifies the file that contains the hash that we want to crack.
|
||||
|
||||
After running the command, we can see that the password is ``secret``. We can unzip the file by using the command ``unzip TopSecret.zip`` or right click the file in the File Explorer >
|
||||
|
||||
Reference in New Issue
Block a user