Extract files from password locked winrar archive..

dvirk · **Joined:** 05 Apr 2010 09:04 **Posts:** 8

Hello luigi and the other members in the forum..
Today i got something in a winrar that i look for it long time and found only 1 thing..
but.. it is password locked... =\
so i thought if you have\know something to extract the things in the archive without to know the password..
i search in google and all i saw is just bruteforce stuff..

so if you have something or know something to help me ..
Thanks for all who will try to help me..
(And im sorry for bad english )

aluigi · **Posted:** 05 Apr 2010 19:23

I have not found references to "plain-text attacks" about the encryption method used by winrar (only a quick search) but, yes, in any case the brute forcing/wordlist is the main method but obviously the result depends by the length and complexity of the password

dvirk · **Joined:** 05 Apr 2010 09:04 **Posts:** 8

Thanks luigi for the fast answer..
well there is must to be a bug or something because how that you said "obviously the result depends by the length and complexity of the password" so its could take years !
i will try by my self to try to give you something that will can to help to try to make it.. and i sure that more half of the forum need something like that.. ;)

Sethioz · **Posted:** 06 Apr 2010 00:24

actually you can unlock basically every winrar archive, i cannot remember it exactly, but on "hackthissite.org" there is a real mission, where you have to crack a archive file and obviously you are not going to bruteforce it.

you have to have ONE file that is inside of rar and content doesn't have to be same, only the filename and size have to be same. then you can crack open any rar archive.

here's what you can do, go to hackthissite.org and find that mission, then google for "hackthissite mission x" where x is the mission number. or "HTS mission x".
im 100% sure there was a mission about it and i have done it too. i just can't remember the tools and details.

dvirk · **Joined:** 05 Apr 2010 09:04 **Posts:** 8

nice idea man..
but im not so good at hacking html stuff so it will be hard fot me to try to do all those level so may you will try to remember which level was it or try to fdo that for me?
man i will so thank you ! :)

Sethioz · **Posted:** 06 Apr 2010 21:33

you do not need to make previous ones in order to take this challenge, you can pick any of them. it is "realistic mission 15" (seculas Ltd.)

dvirk · **Joined:** 05 Apr 2010 09:04 **Posts:** 8

look i tried to do some thing like this:
pkcrack -C disconnect.rar -c "disconnect/readme.txt" -P lawl.rar -p readme.txt -d cracked.rar -a
and when i did it this is show up in the cmd :
Sorry, not enough memory available.

any idea ? :(

aluigi · **Posted:** 06 Apr 2010 22:46

are you sure that "pkcrack" isn't a tool only for zip files?

Sethioz · **Posted:** 08 Apr 2010 16:26

umm should be for both, but i can't remember. seems like it says zip.
but why does it say not enought memory then ?
grrr i dunno, i have never messed with .rar files myself. i just remembered that mission from HTS.

aluigi · **Posted:** 08 Apr 2010 17:34

pkcrack is ONLY for zip archives that use the jurassik zip crypto algorithm (ZipCrypto).

rar used a proprietary algorithm till version 2.x (included).
from 3.x (or 2.9?) it uses AES like the zip archives.
and AES is not vulnerable to plain-text attacks.

Sethioz · **Posted:** 09 Apr 2010 16:50

sry my bad then, i didn't remember that mission so well, i tought it was rar or rar/zip.
i have never done research on rar/zip so i didn't know about it.

if it uses AES, it means that its impossible to crack if i use like over 30 character password ? only way is bruteforce and thats it ?
because truecrypt uses AES and also military in USA should use AES and they say that ONLY vulnerable part is password itself.

aluigi · **Posted:** 10 Apr 2010 18:23

exactly

Sethioz · **Posted:** 10 Apr 2010 19:28

never knew that rar is so strong, but in this case, only way is to crack the password itself. using either wordlists or bruteforce.

Luigi Auriemma

Extract files from password locked winrar archive..