ZipRarHunter

ZipRarHunter

ZipRarHunter is a powerful command-line ethical hacking tool designed to crack passwords of ZIP and RAR archive files using a wordlist.It automates the process of password recovery from encrypted archives

Features

• Cracking ZIP files encrypted with both ZipCrypto and AES-256 encryption

• Cracking RAR4 archives using multithreaded brute-force attacks (Also supports RAR5 if the paid version of UnRAR is installed)

• Improve cracking speed with --threads for thread mode (default: 4) or --cores for process mode (default: uses all CPU cores).

• Efficient memory usage by reading wordlists line-by-line (streaming)

• Automatic detection of ZIP encryption methods

• Encoding fallback support (UTF-8 and Latin-1) for various wordlists

Disclaimer

ZipRarHunter should be used responsibly and legally. Unauthorized use of this tool to crack passwords without explicit permission is illegal and unethical. The author is not responsible for any misuse, and it should only be used in controlled environments or on systems for which you have proper authorization.

Requirements

• Linux distributions: Debian, RHEL, Arch
• Python 3.2 or above: Make sure Python 3.2 or later is installed on your system.
• Dependencies:
• pyzipper (for handling ZIP files)
• rarfile (for handling RAR files)

You can install the required Python packages using:pip3

pip3 install pyzipper

pip3 install rarfile

Note for Kali, Parrot, Ubuntu 23.04+, Arch Linux users:

If you see an error like:

error: externally-managed-environment

then use:

PYVER=$(python3 -c "import sys; print(f'{sys.version_info[0]}.{sys.version_info[1]}')")
sudo pip3 install pyzipper rarfile --target /usr/local/lib/python${PYVER}/dist-packages --break-system-packages

Then press enter

Installation

1. Clone the repository:

git clone https://gitlab.com/s_r_e_e_r_a_j/ZipRarHunter.git

2. Navigate to the ZipRarHunter directory:

cd ZipRarHunter

3. Ensure all dependencies are installed. If not, run:

pip3 install -r requirements.txt

Note for Kali, Parrot, Ubuntu 23.04+, Arch Linux users:

If you see an error like:

error: externally-managed-environment

then use:

PYVER=$(python3 -c "import sys; print(f'{sys.version_info[0]}.{sys.version_info[1]}')")
sudo pip3 install -r requirements.txt --target /usr/local/lib/python${PYVER}/dist-packages --break-system-packages

Then press enter

4. Navigate to the ZipRarHunter directory

cd ZipRarHunter

5. Install the tool

   Run the install.py script

sudo python3 install.py

then enter y for install

Usage

ZipRarHunter uses command-line arguments to specify the target file, wordlist, file type (ZIP or RAR), and the number of threads or cores.

Basic Usage

ziprarhunter -f /path/to/archive.zip -w /path/to/wordlist.txt -t zip
ziprarhunter -f /path/to/archive.rar -w /path/to/wordlist.txt -t rar

Command-line Arguments

• -f or --file: The path to the ZIP or RAR file you want to crack.

• -w or --wordlist: The path to the wordlist file that contains potential passwords.

• -t or --type: The type of archive. Acceptable values are zip or rar.

• --threads: Number of threads to use for cracking (default: 4). Mutually exclusive with --cores.

• --cores: Number of CPU cores to use for process-based cracking (default is all cores). Mutually exclusive with --threads

• Use either --threads (number of threads, default 4) or --cores (number of CPU processes, default = all cores). Do not use both.

Example Commands

1. Crack a ZIP file with a wordlist:

ziprarhunter -f /path/to/archive.zip -w /path/to/wordlist.txt -t zip

2. Crack a RAR file with a wordlist:

ziprarhunter -f /path/to/archive.rar -w /path/to/wordlist.txt -t rar

3. Crack a zip file with 20 threads:

ziprarhunter -f /path/to/archive.zip -w /path/to/wordlist.txt -t zip --threads 20

4. Crack a zip file using 6 CPU cores:

ziprarhunter -f /path/to/archive.zip -w /path/to/wordlist.txt -t zip --cores 6

Output Example

Password found : password123

uninstallation

Run the install.py script

sudo python3 install.py

Then Enter n for uninstall

License

This project is licensed under the MIT License - see the LICENSE file for details.