Hacker News new | ask | show | jobs
by jefb 605 days ago
Did you end up discovering the original password to the zip file? (was it, as I'd hope, `TIMBOBIMBO` ?)
1 comments

No, I did not. I threw quite a lot of compute power at it using bkcrack (CPU) and hashcat (GPU) but never found out what it was. It was definitely not TIMBOBIMBO, sadly!

I also ended up sponsoring the bkcrack project because the maintainer added a new option for me: https://github.com/kimci86/bkcrack/pull/126

How much was "quite a lot"?
I did a pass with bkcrack. The password is over 13 char.

bkcrack.exe -k 98e0f009 48a0b11a c70f8499 -r 1..18 ?p bkcrack 1.7.0 - 2024-05-26 [11:07:33] Recovering password length 0-6... length 7... length 8... length 9... length 10... length 11... length 12... length 13...

I can tell you it's over 14 ?p, and over 16 ?u?d, and over 17 ?u.
where's the original encrypted zip for this?
If you want to try to crack the password you don't need the ZIP file. Just the key (which you can see in the bkcrack command above).