ZipRipper - A CMD script to crack password protected ZIP, RAR, 7z, and PDF files, using JohnTheRipper
*Powered by JohnTheRipper*
Credit To:
JohnTheRipper - https://github.com/openwall/john
cyclone_hk Wordlist(Hosted by Weakpass) - https://github.com/cyclone-github/wordlist
7zip - https://www.7-zip.org/
StrawberryPerl(Portable) - https://strawberryperl.com/releases.html
Instructions:
1.) Double-click the script, and click the Start button to begin
2.) Choose a password protected ZIP, RAR, 7z, or PDF file
3.) Wait for password..
When a password is found an alert window will appear, and the password(s) will be
saved to the users desktop as: ZipRipper-Passwords.txt
If you have questions, head on over to Discussions Q&A
Current version provides support for hardware acceleration via OpenCL for:
nVidia "GeForce", "Quadro", "A Series", "RTX Ada" and AMD "Radeon RX", "Radeon Pro" cards
All GPU users: Ensure you have the latest GPU drivers installed.
AMD GPU users: For GPU support the script will offer to enable OpenCL on your system if the dependencies are not present.. Otherwise you may need to use the script located in the .resources folder to enable OpenCL on your system.
ZipRipper is portable, there are two different running modes; Online Mode, and Offline mode...
Online Mode: ZipRipper gathers its resources from the web (JohnTheRipper, 7zip, and Portable Perl). Only the script itself and an internet connection are required for this mode.
Offline Mode: ZipRipper uses/requires a local resource file [zr-offline.txt]. The presence of [zr-offline.txt] in the same folder as the script is required and will force offline mode. An internet connection is not needed for this mode.
[zr-offline.txt] creator: Click the letters JtR in John's hat to create [zr-offline.txt], you can then relaunch in offline mode, or package the offline/portable script for use at a later time.
If the script is interrupted normally (by pressing the 'q' key to quit or the 'red x', once), resume will be enabled. A MD5 hash is created for each job that is used to store the resume data in: %AppData%\ZR-InProgress\[MD5HASH] to ensure multiple files with the same name can have InProgress jobs simultaneously. If a pending job is found the user is presented with the options of either resuming the job, or bypassing the resume feature and starting a new job.
Note: When a job is completed the resume data is removed. All resume data can be cleared by clicking the center of John's tie.
Alternate wordlist options:
Click John's mouth and select an option before starting the session. (Clicking an option will register your selection and quietly dismiss the menu, selecting no option will use the default JtR wordlist)
It is possible to change the built in alternate wordlist. The included cyclone_hk alternate wordlist is an optional 667MB download, and 2.3GB expanded on disk. Although the easiest way to use an additional wordlist other than the built in Cyclone alternate, is the Custom wordlist option, which allows you to select a local file.
Examples of how to change the built in alternate wordlist:
-A lightweight/robust wordlist based on RockYou (optional 133MB uncompressed download, and 133MB on disk) you would change the section at the top of the script to the following
SET WORDLISTNAME="RockYou"
SET WORDLISTADDR="https://github.com/brannondorsey/naive-hashcat/releases/download/data/rockyou.txt"
-Cyclone/HashesOrg/HashKiller[combined] wordlist (optional 6.53GB download, and 15.02GB expanded on disk) you would change the section at the top of the script to the following
SET WORDLISTNAME="Combined"
SET WORDLISTADDR="https://download.weakpass.com/wordlists/1927/cyclone.hashesorg.hashkiller.combined.txt.7z"
-Etc..
More wordlists can be found at https://weakpass.com/wordlist and various other places around the web..
The built in alternate wordlist supports direct download links to:
-7z archives containing a single text file
-Raw unarchived txt files
To enable BruteForce mode: Create an empty .TXT file, and select it as a wordlist by using the "Custom" wordlist option. This will bypass the wordlist and immediately start BruteForce.
UNC Paths and redirected folders are supported.
