John the Ripper による zip fileのパスワード解析(crack) -> ボツ - end0tknr's kipple - web写経開発
先程の entry 同様、没ネタです。
zipファイルでは、容量と共に、抽出される hash も大きくなりますが、 hashcat では、小さな size(数文字のtext)のhash 以外、解析できないようですので、 諦めました。
hashcat でも GPU を認識はします
PS C:\Users\end0t\tmp\hashcat-6.2.5> .\hashcat.exe -I hashcat (v6.2.5) starting in backend information mode CUDA Info: ========== CUDA.Version.: 11.6 Backend Device ID #1 (Alias: #2) Name...........: NVIDIA GeForce RTX 3060 Processor(s)...: 28 Clock..........: 1807 Memory.Total...: 12287 MB Memory.Free....: 11281 MB PCI.Addr.BDFe..: 0000:30:00.0 OpenCL Info: ============ OpenCL Platform ID #1 Vendor..: NVIDIA Corporation Name....: NVIDIA CUDA Version.: OpenCL 3.0 CUDA 11.6.58 Backend Device ID #2 (Alias: #1) Type...........: GPU Vendor.ID......: 32 Vendor.........: NVIDIA Corporation Name...........: NVIDIA GeForce RTX 3060 Version........: OpenCL 3.0 CUDA Processor(s)...: 28 Clock..........: 1807 Memory.Total...: 12287 MB (limited to 3071 MB allocatable in one block) Memory.Free....: 11520 MB OpenCL.Version.: OpenCL C 1.2 Driver.Version.: 511.23 PCI.Addr.BDF...: 30:00.0 OpenCL Platform ID #2 Vendor..: Intel(R) Corporation Name....: Intel(R) OpenCL HD Graphics Version.: OpenCL 3.0 Backend Device ID #3 Type...........: GPU Vendor.ID......: 8 Vendor.........: Intel(R) Corporation Name...........: Intel(R) UHD Graphics Version........: OpenCL 3.0 NEO Processor(s)...: 24 Clock..........: 1100 Memory.Total...: 6453 MB (limited to 1613 MB allocatable in one block) Memory.Free....: 3168 MB OpenCL.Version.: OpenCL C 3.0 Driver.Version.: 30.0.101.1122 OpenCL Platform ID #3 Vendor..: Intel(R) Corporation Name....: Intel(R) OpenCL Version.: OpenCL 3.0 WINDOWS Backend Device ID #4 Type...........: CPU Vendor.ID......: 8 Vendor.........: Intel(R) Corporation Name...........: Intel(R) Core(TM) i5-10210U CPU @ 1.60GHz Version........: OpenCL 3.0 (Build 0) Processor(s)...: 8 Clock..........: 1600 Memory.Total...: 16134 MB (limited to 2016 MB allocatable in one block) Memory.Free....: 8035 MB OpenCL.Version.: OpenCL C 3.0 Driver.Version.: 2021.13.11.0.23_160000
hashcat による パスワード解析 - 100KB EXCELでの NG例
hash抽出
PS> ./john-1.9.0-jumbo-1-win64/run/zip2john.exe EXCEL_S.zip > EXCEL_S.hashcat ver 2.0 EXCEL_S.zip/Book1.xlsx PKZIP Encr: cmplen=76365, decmplen=106981, crc=FFC62F25
【旧】 EXCEL_S.zip/Book1.xlsx:$pkzip2$1*1*2*0*12a4d*1a1e5*ffc62f25*0*28*<略>186f*$/pkzip2$:Book1.xlsx:EXCEL_S.zip::EXCEL_S.zip
【新】 $pkzip2$1*1*2*0*12a4d*1a1e5*ffc62f25*0*28*<略>186f*$/pkzip2$
パスワード解析
しかし、100KBのexcelのzipでは、 「Status: Exhausted」のままでしたので、諦めました。
PS> cd hashcat-6.2.5 PS> ./hashcat.exe -m 17200 -a 3 -w 4 -S ..\EXCEL_S.hashcat \ --increment ?a?a?a?a --status : Approaching final keyspace - workload adjusted. Session..........: hashcat Status...........: Exhausted Hash.Mode........: 17200 (PKZIP (Compressed)) Hash.Target......: $pkzip2$1*1*2*0*12a4d*1a1e5*ffc62f25*0*28*8*12a4d*f...kzip2$ Time.Started.....: Fri Feb 11 16:35:33 2022 (20 secs) Time.Estimated...: Fri Feb 11 16:35:53 2022 (0 secs) Kernel.Feature...: Pure Kernel Guess.Mask.......: ?a?a?a?a [4] Guess.Queue......: 4/4 (100.00%) Speed.#1.........: 4156.7 kH/s (25.25ms) @ Accel:512 Loops:1 Thr:32 Vec:1 Speed.#*.........: 4156.7 kH/s Recovered........: 0/1 (0.00%) Digests Progress.........: 81450625/81450625 (100.00%) Rejected.........: 0/81450625 (0.00%) Restore.Point....: 81450625/81450625 (100.00%) Restore.Sub.#1...: Salt:0 Amplifier:0-1 Iteration:0-1 Candidate.Engine.: Host Generator + PCIe Candidates.#1....: LLx> -> ~?~ Hardware.Mon.#1..: Temp: 41c Fan: 0% Util: 21% Core: 768MHz Mem:4995MHz Bus:4 Started: Fri Feb 11 16:35:31 2022 Stopped: Fri Feb 11 16:35:55 2022``` PS>