Download Article
Download Article
This wikiHow teaches you how to gain access to a ZIP folder which has an unknown password. The only way to do this is by downloading a program which can crack the password for you, though the process of cracking the password can take days to complete.
Things You Should Know
- Password-cracking programs will likely take many hours to guess the password.
- Use John the Ripper, a free command-line based program, to compare the ZIP folder’s password to the program’s list of passwords.
- Alternatively, use a paid password-cracking software that uses a brute-force password guessing technique.
Steps
-
Understand the risk. You'll need to download a program that can guess the password on the ZIP folder. Before you do this, be aware that this can infect your computer with a virus. Review safe browsing practices and install antivirus software before you continue.
- Most free trial versions will only crack short passwords. If a program not listed here offers unlimited cracking for free, refrain from downloading it as it may be malware.
-
Expect this process to take a large amount of time. Most password-cracking programs will take several hours to guess the simplest of passwords; realistically, you can expect this process to take several days to complete.
- There is no way to routinely guess the password within a few minutes. Any service claiming to do so is most likely malware. [1] X Research source
Advertisement -
Close background programs. You'll need as much of your computer's processor speed as possible, so close any processing-heavy programs such as Photoshop, video games, audio and video players, and so on.
- Even with your computer's maximum amount of processing speed allocated to cracking the ZIP folder's password, the process can still take days.
-
Place your ZIP folder on the desktop. The desktop is the most-easily accessed location on your computer, so drag the ZIP folder onto the desktop before attempting to crack its password.
- You can also copy-and-paste the ZIP folder by selecting the folder, pressing Ctrl + C (Windows) or ⌘ Command + C (Mac), going to the desktop, and pressing Ctrl + V or ⌘ Command + V .
- If the ZIP folder is on a mobile item such as a smartphone or a tablet, transfer the folder onto a computer before proceeding.
Advertisement
-
Understand how this method works. John the Ripper is a free, command line-based program that can be used to crack passwords. Unfortunately, while it is free, it can be tricky to install and use.
-
Download John the Ripper. Go to http://www.openwall.com/john/ in your computer's web browser, then click the John the Ripper 1.8.0-jumbo-1 (Windows binaries, ZIP, 34 MB) link in the "community enhanced version" section near the bottom of the page.
-
Extract John the Ripper. Double-click the downloaded ZIP folder, click the Extract tab, click Extract all , click Extract , and wait for the window to open.
-
Install John the Ripper. John the Ripper can't be installed like normal programs, but you can install it to your desktop by moving its folder there and then renaming it to "john":
- In the extracted window which opens, click the "john180j1w" folder.
- Press Ctrl + C
- Open your desktop, then press Ctrl + V .
- Right-click the folder, then click Rename
- Type in john and press ↵ Enter .
-
Place your ZIP folder in the John the Ripper "run" folder. Copy the folder by clicking it and pressing Ctrl + C , then open the "john" folder, open the "run" folder, click a blank space, and press Ctrl + V .
-
Open Command Prompt. This is your computer's command line program:
- Click Start
- Type in command prompt
- Click Command Prompt at the top of the Start window.
-
Change the directory to John the Ripper's "run" folder. Type in cd desktop/john/run and press ↵ Enter .
-
Enter the "run" command. Type in zip2john.exe name.zip > name.hash (making sure to replace "name" with the name of your ZIP folder) and press ↵ Enter .
- For a ZIP folder named "hello", for example, you'd type zip2john.exe hello.zip > hello.hash here.
-
Define the ZIP folder's hash. Type in name.hash (where "name" is the name of your hash file) and press ↵ Enter . At this point, you're ready to begin cracking the password.
-
Begin cracking the password. Type in john.exe --pot=name.pot --wordlist=john/run/password.lst name.hash and press ↵ Enter . John the Ripper will begin comparing your ZIP folder's password to its database of passwords. [2] X Research source
- You'll need to replace "name" in both "name.pot" and "name.hash" with your ZIP folder's name.
- The "password.lst" file contains a list of passwords and their permutations.
-
Prompt the cracked password to display. Once the password has been determined, you'll see "Session complete" appear at the bottom of Command Prompt. At this point, you can type in type name.pot (again, substitute your folder's name for "name") and press ↵ Enter to view the password for the ZIP folder.
Advertisement
-
Understand how this works. Most professional password-cracking software will allow you to crack a file's password if it's under a certain number of characters. In order to crack most files, though, you'll need to purchase the program.
- The positive side of using these programs is that they are usually user-friendly.
-
Know what to look for. Your selected password cracker should come with a free trial, and it should be able to use brute-force password techniques.
-
Download and install a professional password cracker. The following options are recommended, though you will ultimately need to buy the software: [3] X Research source
- Advanced Archive Password Recovery — https://www.elcomsoft.com/archpr.html
- ZipKey — https://www.passware.com/kit-standard/freedemo/
-
Open your password cracker. Once you've installed your password cracker, open it by clicking or double-clicking its program icon.
-
Select your password-protected ZIP folder. You'll usually do this by clicking Browse , Open , or Add in the program, selecting the ZIP folder that you want to crack, and clicking Open or Choose .
- Some password crackers may allow you to click and drag the ZIP folder into the program's window.
-
Choose a password-guessing option. In most cases, you'll want to select the Brute force option, but you may be able to select Dictionary (or similar) to check a list of words similar to one that you input.
- The Dictionary method is best used for instances in which you either know part of the password or know the phrase that you used (but not the capitalization or characters).
-
Start cracking the ZIP password. Click the Start or Run button in your application, then wait for the password to finish cracking. As mentioned previously, this process may take days to complete.
-
Review the cracked ZIP password. Once the password has been cracked, you should see a notification in the program. You can then use the cracked password to open the ZIP folder.
Advertisement
Community Q&A
Search
-
QuestionHow can I open a Microsoft Word file without a password?Denis GladyshCommunity AnswerIf it's Word 97-2003, you can decrypt the file without the password online. If it's a Word 2007-2016, you must employ password searching/password recovery. Use a dictionary attack and a position mask to reduce the range of searching.
-
QuestionHow do I "un-brick" a tablet?Community AnswerYou will need to flash the official firmware via a PC. For Samsung tablets, use Odin.
-
QuestionThe John Ripper software is not working for me. I'm getting a message that says "The system cannot find the file specified" after doing steps 7, 8 and 9. What should I do?Community AnswerYou need to make sure the files are in the "run" directory. If they are not, the error message appears. Also, make sure you are in the John directory in command prompt.
Ask a Question
200 characters left
Include your email address to get a message when this question is answered.
Submit
Advertisement
Tips
- There are a few different approaches a program can use. For best results, try one of each. These include:
- Dictionary attack: Tests a list of words. Much faster than other options if it works, but high chance of failure as not all passwords fall in this category.
- Brute force attack: Guesses every possible combination. Only works for short passwords and/or fast processors.
- Brute force with mask: If you remember anything about the password, this will let you tell the program before it brute forces. For instance, it may only try combinations that use letters, not numbers.
Thanks - You may have to leave your computer alone for several days before the password is cracked.Thanks
Submit a Tip
All tip submissions are carefully reviewed before being published
Thanks for submitting a tip for review!
Advertisement
Warnings
- Brute force attacks can take a lot of time depending on your processor speed, and your computer may even crash due to overworking the processor if the cracking goes on for too long.Thanks
- Password crackers can be used legally, but only to access files you have a right to access.Thanks
- Copying or downloading licensed software without paying for it, or without consent from the owner, is illegal in most countries.Thanks
Advertisement
References
About This Article
Article Summary
X
1. Go to https://www.openwall.com/john/
.
2. Download John the Ripper.
3. Extract and install the app on the desktop.
4. Copy the ZIP file to the John the Ripper "Run" folder.
5. Open the Command Prompt.
6. Change to the desktop/john/run folder.
7. Type "zip2john.exe name.zip > name.hash" and press Enter
.
8. Type "john.exe --pot=name.pot --wordlist=john/run/password.lst name.hash" and press Enter
.
9. Type "type name.pot" and press Enter
.
Did this summary help you?
Thanks to all authors for creating a page that has been read 1,072,951 times.
Advertisement
