Hey Folks, in this tutorial we will discuss an another ZIP file password cracking tool called ” Zydra”. Zydra is a file password recovery tool and Linux shadow file cracker. It uses the dictionary search or Brute force method for cracking passwords. We have simplified the features of this tool which you can read below.

Features

  • In the brute force method, you can specify the type of characters that may be used in the password.
  • In the brute force method, you can specify the min length and max length of the passwords.
  • Cracking files password using two methods: 1. dictionary method 2. brute force method
  • There is a percent progress bar showing how much of the process has been performed.
  • Error handling.

Let’s take a look 🙂 !!

Installation

Now first we have to download this entire tool using git command from gitub. After downloading is done we will go to the directory of this tool and execute the “bash” command to establish the dependency of this tool.

After completing the installation we can boot this tool with the help of “python” command. No need to execute help command as it will automatically show all its attributes after executing the following command.

Create ZIP file

We have to make a password protected zip file in front of you to maintain transparency between us. Do not think so, just use the following command to create a zip file.

Usage 🙂 !! zip –password < your password > < give zip file name > < files that you want compressed >

Password Cracking via Dictionary Attack

This gives us two options, dictionary and brute force. First we select the dictatorial attack and as you can see we have our own wordlist to crack the zip file password that we mentioned in the command. After giving the location of zip file and wordlist, it successfully finds a valid password for the zip file.

Usage 🙂 !! python3 Zydra.py -f < zip file > < wordlist >

Password Cracking via Bruteforce Attack

We have created a numeric password protected zip file with the help of the previous command and now we have to crack the password of this zip file. You need to understand to use the below command. In this case we will take help of brute forcing and use the following command to crack the password.

Usage 🙂 !! python3 Zydra.py -f < zip file > -b < digits, letters etc > -m < minimum > -x < maximum >

Cracking Shadow Files

Zydra can automatically crack the password or hashes of users found in Linux shadow files but it will totally depends on your dictionary.

About the Author
Shubham Goyal Certified Ethical Hacker, information security analyst, penetration tester and researcher. Can be Contact on Linkedin.

Leave a Reply

Your email address will not be published. Required fields are marked *