XeNTaX Forum Index
Forum MultiEx Commander Tools Tools Home
It is currently Tue Jun 27, 2017 4:53 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 64 posts ]  Go to page Previous  1, 2, 3, 4, 5  Next
Author Message
 Post subject: Re: Hacking Zip Passwords (C9)
PostPosted: Tue Mar 01, 2011 1:59 pm 
Offline
advanced

Joined: Tue Sep 28, 2010 4:26 pm
Posts: 67
Has thanked: 0 time
Have thanks: 0 time

Can this method (or similar) be used to find a straight RAR archive file password?
Every "password unlocker/cracker" app out there seems to simply be a virus or malware ITSELF. :constipated:

Even if anyone knows of a non-infected app that can do this already would be appreciated.

You can make the ads go away by registering



Top
 Profile  
 
 Post subject: Re: Hacking Zip Passwords (C9)
PostPosted: Tue Mar 01, 2011 2:05 pm 
Offline
ultra-veteran
ultra-veteran

Joined: Mon Oct 27, 2008 12:11 am
Posts: 360
Location: Slovakia
Has thanked: 35 times
Have thanks: 93 times
aluigi wrote:
the password of the data.zip in "Akhra - The Treasures" is 2yKJ6KhRJKJ/18J5
found in less than one minute :)


Yeah, I've found it too. Thanks a lot for help and your tools-for-everything :)


Top
 Profile  
 
 Post subject: Re: Hacking Zip Passwords (C9)
PostPosted: Tue Mar 01, 2011 2:18 pm 
Offline
VVIP member
VVIP member
User avatar

Joined: Thu Dec 08, 2005 12:26 pm
Posts: 1925
Location: www.ZENHAX.com
Has thanked: 4 times
Have thanks: 627 times
@SLIFallen
don't confuse the finding of the password located in the memory of the program that opens the archive with cracking an unknown passowrd.
they are 2 completely different things


Top
 Profile  
 
 Post subject: Re: Hacking Zip Passwords (C9)
PostPosted: Sat Mar 05, 2011 10:53 pm 
Offline
ultra-veteran
ultra-veteran

Joined: Mon Oct 27, 2008 12:11 am
Posts: 360
Location: Slovakia
Has thanked: 35 times
Have thanks: 93 times
Here's another case: game Aztec Tribe has .zip with password called AztecTribe.dat. I've used signsrch for scanning .exe and all of .dll files there, but non of them contains reference to ZipCrypto. Any ideas? :)


Top
 Profile  
 
 Post subject: Re: Hacking Zip Passwords (C9)
PostPosted: Sun Mar 06, 2011 3:43 am 
Offline
mega-veteran
mega-veteran

Joined: Sat Feb 05, 2011 1:41 am
Posts: 209
Has thanked: 0 time
Have thanks: 1 time
a very handy tutorial indeed
Thanks


Top
 Profile  
 
 Post subject: Re: Hacking Zip Passwords (C9)
PostPosted: Sun Mar 06, 2011 11:36 am 
Offline
VVIP member
VVIP member
User avatar

Joined: Thu Dec 08, 2005 12:26 pm
Posts: 1925
Location: www.ZENHAX.com
Has thanked: 4 times
Have thanks: 627 times
@merlinsvk
the executables of the games on bigfishgames are encrypted with armadillo but in this case the problem was hge.dll compressed with upx.
so after having unpacked hge.dll you can scan it with signsrch without problems :)

anyway the password of Aztec Tribe is {0D8FD1A3-DEBF-4ef2-8A91-CDB0A105F6C0}


Top
 Profile  
 
 Post subject: Re: Hacking Zip Passwords (C9)
PostPosted: Sun Mar 06, 2011 12:23 pm 
Offline
ultra-veteran
ultra-veteran

Joined: Mon Oct 27, 2008 12:11 am
Posts: 360
Location: Slovakia
Has thanked: 35 times
Have thanks: 93 times
aluigi wrote:
@merlinsvk
anyway the password of Aztec Tribe is {0D8FD1A3-DEBF-4ef2-8A91-CDB0A105F6C0}


Oh my God, I was looking at that in HxD, but didn't realize it can be password. I thought it is some key from Windows Registry :D



But thanks for pointing to UPX, I forgot that .exe/.dll can be packed :)


Last edited by merlinsvk on Wed Aug 20, 2014 10:06 am, edited 1 time in total.

Top
 Profile  
 
 Post subject: Re: Hacking Zip Passwords (C9)
PostPosted: Mon Mar 07, 2011 9:08 am 
Offline
VVIP member
VVIP member
User avatar

Joined: Thu Dec 08, 2005 12:26 pm
Posts: 1925
Location: www.ZENHAX.com
Has thanked: 4 times
Have thanks: 627 times
for anyone interested I remember that I maintain a list of games zip password retrieved by myself and I just updated it yesterday after having downloaded various trials from bigfishgames and other websites (I used some keywords to know the games using passworded zips):
http://aluigi.org/papers.htm#info


Top
 Profile  
 
 Post subject: Re: Hacking Zip Passwords (C9)
PostPosted: Sun Apr 17, 2011 11:18 am 
Offline
ultra-n00b

Joined: Sun Apr 17, 2011 10:38 am
Posts: 2
Has thanked: 0 time
Have thanks: 0 time
Hi, I used all that is written here for this game, but can not find anything please help me find the password or another way to full of advise if there is.
Thanks all


Top
 Profile  
 
 Post subject: Re: Hacking Zip Passwords (C9)
PostPosted: Sun Apr 17, 2011 5:23 pm 
Offline
VVIP member
VVIP member
User avatar

Joined: Thu Dec 08, 2005 12:26 pm
Posts: 1925
Location: www.ZENHAX.com
Has thanked: 4 times
Have thanks: 627 times
the method worked perfectly also in this case but there were 2 problems:
1) the key doesn't contain only alphanumeric chars but also some others, that's why it wasn't quickly visible
2) these other chars are hard to copy&paste in the normal zip programs when they ask for password so you can't use the password

luckily exist QuickBMS and zip.bms just for avoiding these problems :)

so get both:
http://aluigi.org/papers.htm#quickbms
http://aluigi.org/papers/bms/zip.bms

and now:
  • open zip.bms with a text editor (notepad, notepad++ and so on)
  • delete the line containing:
    Code:
    set ZIP_PASSWORD string ""  # put the password here (only ZipCrypto supported at the moment)
  • replace it with the following:
    Code:
    set ZIP_PASSWORD binary "\xed\xe0\xf5\x23\x69\x6e\x63\x6c\x75\x64\x65\x20\x63\x6f\x72\x65\x2f\x66\x69\x6c\x74\x65\x72\x53\x74\x72\x65\x61\x6d\x2e\x68\xc1\xcb\xdf"
  • save the file and use it in quickbms as usual


Top
 Profile  
 
 Post subject: Re: Hacking Zip Passwords (C9)
PostPosted: Sun Apr 17, 2011 7:00 pm 
Offline
ultra-n00b

Joined: Sun Apr 17, 2011 10:38 am
Posts: 2
Has thanked: 0 time
Have thanks: 0 time
Thank you so much it really helped me soon plan to upgrade the game and can change the password, could you write like myself find this password?

End when i extract some archives i got this error
Image
can i something do with this ?


Top
 Profile  
 
 Post subject: Re: Hacking Zip Passwords (C9)
PostPosted: Sun Apr 17, 2011 11:10 pm 
Offline
VVIP member
VVIP member
User avatar

Joined: Thu Dec 08, 2005 12:26 pm
Posts: 1925
Location: www.ZENHAX.com
Has thanked: 4 times
Have thanks: 627 times
the method has been the same described before, the only additional step was selecting the second number in the stack window (right-bottom) and selecting "Follow in dump", so that the password was visible in the dump window (left-bottom).

about that error I have noticed that some files in offices.awa are not password protected and my script was written to decrypt all the files in case ZIP_PASSWORD was set (the reason was simply that usually all the files are encrypted).
I have updated the script so that now only the encrypted files (flag & 1) will use the password.

anyway from the image you pasted I noticed that the file you were trying to unzip is corrupted because the name is clearly wrong.
here I have downloaded the game and that file doesn't exist.


Top
 Profile  
 
 Post subject: Re: Hacking Zip Passwords (C9)
PostPosted: Sun Apr 17, 2011 11:26 pm 
Offline
VVIP member
VVIP member
User avatar

Joined: Thu Dec 08, 2005 12:26 pm
Posts: 1925
Location: www.ZENHAX.com
Has thanked: 4 times
Have thanks: 627 times
I have forced the update of the game and I have noticed the problem you talk about like "missioPK" and the other files.
it's just a problem of the zip files that contain some garbage.

the reason why zip.bms doesn't handle them correctly it's because it uses an alternative (simpler) method to read them.
there is no solution at the moment.


Top
 Profile  
 
 Post subject: Re: Hacking Zip Passwords (C9)
PostPosted: Sun Apr 24, 2011 4:03 pm 
Offline
ultra-n00b

Joined: Mon Oct 11, 2010 10:49 pm
Posts: 6
Has thanked: 0 time
Have thanks: 0 time
The contents of this post was deleted because of possible forum rules violation.


Top
 Profile  
 
 Post subject: Re: Hacking Zip Passwords (C9)
PostPosted: Mon Apr 25, 2011 2:23 pm 
Offline
VVIP member
VVIP member
User avatar

Joined: Thu Dec 08, 2005 12:26 pm
Posts: 1925
Location: www.ZENHAX.com
Has thanked: 4 times
Have thanks: 627 times
the password is HappyMuff69



Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 64 posts ]  Go to page Previous  1, 2, 3, 4, 5  Next

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group