Select and Upload your ZIP or RAR or 7z Archive file:
- Uploaded files will be deleted immediately. We do NOT store your files.
- This site is using rar2john and zip2john and 7z2john from JohnTheRipper tools to extract the hash
- The goal of this page is to make it very easy to convert your ZIP / RAR / 7zip archive files (.rar, .zip, .7z) to “hashes” which hashcat/john can crack
- We can also attempt to recover its password: send your file on our homepage
More than easy, just select and upload your ZIP / RAR / 7zip archive file (Max size: 200 Mb). The hash will be computed in the “Output” part.
RAR Archive hashcat mode are 12500 (RAR3-hp) and 13000 (RAR5), and output format looks like:
type = 0 stands for files encrypted with rar -hp Option “hp” encrypts both file data and headers. Sample:
type = 1 stands for files encrypted with rar -p Option “-p” option encrypts only files. Sample:
$RAR3$*type*hex(salt)*hex(crc)*PACK_SIZE*UNP_SIZE*0*archive_name*offset-for-ciphertext*method:type::file_name or $RAR3$*type*hex(salt)*hex(crc)*PACK_SIZE*UNP_SIZE*1*hex(full encrypted file)*method:type::file_name
Note: We only support Type = 0 for password recovery.
ZIP Archive hashcat mode is 13600 (WinZip) and can output 2 formats, which look like:
$zip2$*0*3*0*b5d2b7bf57ad5e86a55c400509c672bd*d218*0**ca3d736d03a34165cfa9*$/zip2$ or $pkzip2$2*1*1*0*8*24*8058*9125*1b9e7c93b129bd495fe107c89ffbf222bc39303ae92ab534e5cb5013db97bb538945fcb1*2*0*188*2dc*33d1d8af*3c1*2c*8*188*33d1*90ed*.....*$/pkzip2$::::
zip2 stands for AES-256, which provides a stronger encryption. Used in modern zip manager (7-zip, WinZip, etc.)
pkzip2 stands for ZipCrypto, which is an old/legacy encryption.
7-zip Archive hashcat mode is 11600 (7-zip), output format looks like:
Note: Like RAR, one can choose to encrypt Archive header as well – this will hide the file names inside the archive. Option for this is to use -mhe swith with 7z command line tool, or to check the checkbox “Encrypt filenames” in the GUI.
Credits go to JohnTheRipper project ; https://github.com/magnumripper/JohnTheRipper/