Crack zip passwords using John the Ripper

John the Ripper (JTR) is a free password cracking software tool. It is one of the most popular password testing and breaking programs as it combines a number of password crackers into one package, autodetects password hash types, and includes a customizable cracker. It can be run against various encrypted password formats including several crypt password hash types most commonly found on various Unix flavors (based on DES, MD5, or Blowfish), Kerberos AFS, and Windows NT/2000/XP/2003 LM hash. Additional modules have extended its ability to include MD4-based password hashes and passwords stored in LDAP, MySQL, and others.

Crack zip passwords using John the Ripper

1. Extract password hash from your zip file
   ddos@ddos ~/Desktop/JohnTheRipper/run $ ./zip2john /home/ddos/Desktop/Breaking-The-Great-Wall-Of-Web-Rafay-Baloch.pdf.zip > /home/ddos/Desktop/crackzip.hash
   
2. Use John to crack hash file
   ./john  /home/ddos/Desktop/crackzip.hash –wordlist /home/ddos/Downloads/wordlists.txt

Demo

https://www.youtube.com/watch?v=Bpi3A2rawnI