---
notion-id: 5e50c135-e9e0-4f05-8507-5e1fd6ac3358
---
1. 首先将压缩包上传至kali机器，然后使用`zip2john`命令爆出hash文件
`zip2john license.zip >>passwd.txt`

2.然后使用john命令，计算hash文件
```visual basic
[root@kali-hsun test]# john passwd.txt
Warning: invalid UTF- seen reading passwd.txt
Using default input encoding: UTF-
Loaded  password hash (ZIP, WinZip [PBKDF2-SHA1 / SSE2 4x])
Will run  OpenMP threads
Proceeding with single, rules:Wordlist
Press 'q' or Ctrl-C to abort, almost any other key for status
Almost done: Processing the remaining buffered candidate passwords, if any
Warning: Only  candidates buffered for the current salt, minimum
needed for performance.
Proceeding with wordlist:/usr/share/john/password.lst, rules:Wordlist
123321           (license.zip/license/license.dat)
1g ::: DONE / (-- :) .5780g/s 16544p/s 16544c/s 16544C/s ..Open
Use the "--show" option to display all of the cracked passwords reliably
Session completed
```
注意，该行前边的内容即为压缩包的密码
3.破解hash文件rar.txt //此处使用的是john工具的默认字典，也可以自定义字典som1w.txt破解
`john —wordlist=/usr/share/wordlists/som1w.txt rar.txt`