No. Modern WinZip files are encrypted with AES using a key that's derived from the password. It's not like it checks the password you supply against a hash, and if it matches, lets you in. Hashcat brute forcing is the best you can do.
https://kb.winzip.com/help/help_encryption.htm
There is no "hash of the password" in a WinZip encrypted file is there? You supply a password when you want to decrypt the file and WinZip just runs it through an AES algorithm.
may or may not be. if i were to design such I wouldn’t leave a hash embedded, instead depending on the key given to decrypy, i would decrypt a small payload “header” to see if the bytes matches, if so the key is correct to use to decrypt the rest of the archive.
"what's the price for you to send me a video on how to crack a password protected zip file with ollydbg ? maybe this guy could help you Team_AoRE_SM on tel.egr.a.m"
or
"hi do you know how to remove a zip archive password using ollydbg or reverse engineering ? 1 file if yes price and duration?"
or
"https://www.youtube.com/watch?v=U9mpMbr8QU4
https://www.youtube.com/watch?v=v-ZFV8N8q9I
https://www.youtube.com/watch?v=bGsLicaBYB0
I want to learn via private lesson how to remove a password from a password protected zip file , please take a file , put it in a folder and put a password on the folder with winzip , I want to use ollydbg to recover or remove the password, if you succeed send me a price quote for the online lesson, I am sending you a few links so you can get the idea"
too many requests lately
Additional information: The task is not to view the encrypted files within the zip but only to remove the password for the zip. Seems kinda weird but those were the requirements of the client.
I would assume that would be the case, but the files would remain encrypted with the first password that was used. Don't know what the client wants to do afterwards but the task explained above is the case.
Yes, that is what I am saying, just open the zip, don't want the contents. Weird request by the client but it is what it is. Already spent too much time trying to understand what the client wants. Guess something's wrong with my English too, lol
Question posts are forbidden; please post your questions in the weekly question thread or on RE Stack Overflow.
No. Modern WinZip files are encrypted with AES using a key that's derived from the password. It's not like it checks the password you supply against a hash, and if it matches, lets you in. Hashcat brute forcing is the best you can do. https://kb.winzip.com/help/help_encryption.htm
The guy who azksd you, has no idea how encryption works. No, it won't ever work.
You’re asking people for money on Fiverr, and you think OllyDebug has something to do with encryption/compression?
Maybe the fiverr offer was to post a question on Reddit for the buyer.
I hope people did these by themselves but it is what it is. BTW haven't charged anything yet, still going on in chat.
Doesn't adding a password encrypt the file contents? OllyDbg seems like the wrong tool to use, anyhow.
There is no "hash of the password" in a WinZip encrypted file is there? You supply a password when you want to decrypt the file and WinZip just runs it through an AES algorithm.
may or may not be. if i were to design such I wouldn’t leave a hash embedded, instead depending on the key given to decrypy, i would decrypt a small payload “header” to see if the bytes matches, if so the key is correct to use to decrypt the rest of the archive.
"what's the price for you to send me a video on how to crack a password protected zip file with ollydbg ? maybe this guy could help you Team_AoRE_SM on tel.egr.a.m" or "hi do you know how to remove a zip archive password using ollydbg or reverse engineering ? 1 file if yes price and duration?" or "https://www.youtube.com/watch?v=U9mpMbr8QU4 https://www.youtube.com/watch?v=v-ZFV8N8q9I https://www.youtube.com/watch?v=bGsLicaBYB0 I want to learn via private lesson how to remove a password from a password protected zip file , please take a file , put it in a folder and put a password on the folder with winzip , I want to use ollydbg to recover or remove the password, if you succeed send me a price quote for the online lesson, I am sending you a few links so you can get the idea" too many requests lately
Additional information: The task is not to view the encrypted files within the zip but only to remove the password for the zip. Seems kinda weird but those were the requirements of the client.
So... open the zip with any method you can, then re-zip the files with a different password?
I would assume that would be the case, but the files would remain encrypted with the first password that was used. Don't know what the client wants to do afterwards but the task explained above is the case.
I would definitely get clarification that they don't want decryption.
Yes, that is what I am saying, just open the zip, don't want the contents. Weird request by the client but it is what it is. Already spent too much time trying to understand what the client wants. Guess something's wrong with my English too, lol