Kali Linux - Zip
unzip -l suspicious.zip For repeated use, save this script as zipcrack.sh :
#!/bin/bash if [ $# -ne 1 ]; then echo "Usage: $0 <encrypted.zip>" exit 1 fi ZIPFILE=$1 HASHFILE="$ZIPFILE.hash" kali linux zip
7z a -p"secret" -mhe=on -tzip archive.zip folder/ The -mhe=on flag hides the file list (header encryption), something the standard zip command cannot do. When dealing with untrusted ZIP files (e.g., malware samples), you must extract safely without executing any embedded scripts or auto-run features. unzip -l suspicious
For true cross-platform compatibility, 7zip is often superior: unzip -l suspicious.zip For repeated use
john --wordlist=/usr/share/wordlists/rockyou.txt zip_hash.txt If successful, the password appears within seconds. For stronger passwords, you can enable rules: