WeakRSA and FindTheEasyPass

HTB Content
1

Hi, I was wondering if anyone has tried this lately. I know the flags do to being an old task, but it seems maybe HTB has changed these up a little. They zips are protected with pass. I have done zip2john and used rockyou.txt and many others from SecLists as wordlist to try and crack #>john --wordlist=/usr/share/wordlists/rockyou.txt hashes. I have also did bruteforce for about 24hrs just using #>john hashes to no avail. I am a noob, but seems should be easier to crack for beginner.

Thanks,
Noob

2

the password for all the zip files is “hackthebox”, it should say that where you downloaded it. They do this because otherwise the file can get flagged by virus scanners.

1 Like
3

Geesh, your right, I overlooked it. Thank you!

I do see now where it says the password and the checksum.

4

Well, I know what password to use on my financial institutions. ha jk. added to the rockyou.txt and it found it in a 10th of a second.

1 Like