Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <b10a58df2136d485946bd9fa91c80e06@smtp.hushmail.com>
Date: Mon, 06 Oct 2014 21:14:58 +0200
From: magnum <john.magnum@...hmail.com>
To: john-users@...ts.openwall.com
Subject: Re: Zip2john not working

On 2014-10-06 18:14, Danux wrote:
> I recently downloaded the latest jumbo version *john-1.7.9-jumbo-7.tar.gz*:
> and when trying to crack a file created with the latest version of Winzip
> (18.5) for Windows 64-bit, john says it found 4 guesses and when printing
> the cracked one via --show it displays the wrong one. Below the detailed

For cracking WinZIP, you should use a snapshot of bleeding-jumbo 
instead. Since July, the false positives are (afaik) gone for good. You 
need to re-run [latest version of] zip2john as well.

But what you describe is still a bug for (other) formats that may find 
false/alternative passwords: --show only shows the last cracked 
alternative. We have an open issue for that on GitHub. It's currently 
marked as "enhancement", maybe we should upgrade it to a "bug"...

magnum

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.