Jump to content

Search the Community

Showing results for tags 'zip'.

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • Site Related
    • News & Updates
    • Site / Forum Feedback
    • Member Introduction
  • News
    • General News
    • FileSharing News
    • Mobile News
    • Software News
    • Security & Privacy News
    • Technology News
  • Downloads
    • nsane.down
  • General Discussions & Support
    • Filesharing Chat
    • Security & Privacy Center
    • Software Chat
    • Mobile Mania
    • Technology Talk
    • Entertainment Exchange
    • Guides & Tutorials
  • Off-Topic Chat
    • The Chat Bar
    • Jokes & Funny Stuff
    • Polling Station

Categories

  • Drivers
  • Filesharing
    • BitTorrent
    • eDonkey & Direct Connect (DC)
    • NewsReaders (Usenet)
    • Other P2P Clients & Tools
  • Internet
    • Download Managers & FTP Clients
    • Messengers
    • Web Browsers
    • Other Internet Tools
  • Multimedia
    • Codecs & Converters
    • Image Viewers & Editors
    • Media Players
    • Other Multimedia Software
  • Security
    • Anti-Malware
    • Firewalls
    • Other Security Tools
  • System
    • Benchmarking & System Info
    • Customization
    • Defrag Tools
    • Disc & Registry Cleaners
    • Management Suites
    • Other System Tools
  • Other Apps
    • Burning & Imaging
    • Document Viewers & Editors
    • File Managers & Archivers
    • Miscellaneous Applications
  • Linux Distributions

Categories

  • General News
  • File Sharing News
  • Mobile News
  • Software News
  • Security & Privacy News
  • Technology News

Find results in...

Find results that contain...


Date Created

  • Start

    End


Last Updated

  • Start

    End


Filter by number of...

Found 3 results

  1. Password-protected ZIP archives are common means of compressing and sharing sets of files—from sensitive documents to malware samples to even malicious files (i.e. phishing "invoices" in emails). But, did you know it is possible for an encrypted ZIP file to have two correct passwords, with both producing the same outcome when the ZIP is extracted? A ZIP file with two passwords Arseniy Sharoglazov, a cybersecurity researcher at Positive Technologies shared over the weekend a simple experiment where he produced a password-protected ZIP file called x.zip. The password Sharoglazov picked for encrypting his ZIP was a pun on the 1987 hit that's become a popular tech meme: Nev1r-G0nna-G2ve-Y8u-Up-N5v1r-G1nna-Let-Y4u-D1wn-N8v4r-G5nna-D0sert-You But the researcher demonstrated that when extracting x.zip using a completely different password, he received no error messages. In fact, using the different password resulted in successful extraction of the ZIP, with original contents intact: pkH8a0AqNbHcdw8GrmSp Two different passwords for same ZIP file result in successful extraction (Sharoglazov) BleepingComputer was able to successfully reproduce the experiment using different ZIP programs. We used both p7zip (7-Zip equivalent for macOS) and another ZIP utility called Keka. Like the researcher's ZIP archive, ours was created with the aforementioned longer password, and with AES-256 encryption mode enabled. While the ZIP was encrypted with the longer password, using either password extracted the archive successfully. How's this possible? Responding to Sharoglazov's demo, a curious reader, Rafa raised an important question, "How????" Twitter user Unblvr seems to have figured out the mystery: When producing password-protected ZIP archives with AES-256 mode enabled, the ZIP format uses the PBKDF2 algorithm and hashes the password provided by the user, if the password is too long. By too long, we mean longer than 64 bytes (characters), explains the researcher. Instead of the user's chosen password (in this case "Nev1r-G0nna-G2ve-...") this newly calculated hash becomes the actual password to the file. When the user attempts to extract the file, and enters a password that is longer than 64 bytes ("Nev1r-G0nna-G2ve-... "), the user's input will once again be hashed by the ZIP application and compared against the correct password (which is now itself a hash). A match would lead to a successful file extraction. The alternative password used in this example ("pkH8a0AqNbHcdw8GrmSp") is in fact ASCII representation of the longer password's SHA-1 hash. SHA-1 checksum of "Nev1r-G0nna-G2ve-..." = 706b4838613041714e62486364773847726d5370. This checksum when converted to ASCII produces: pkH8a0AqNbHcdw8GrmSp Note, however, that when encrypting or decrypting a file, the hashing process only occurs if the length of the password is greater than 64 characters. In other words, shorter passwords will not be hashed at either stage of compressing or decompressing the ZIP. This is why when picking the long "Nev1r-G0nna-G2ve-... " string as the password at the encryption stage, the actual password being set by the ZIP program is effectively the (SHA1) hash of this string. At the decryption stage, if you were to enter "Nev1r-G0nna-G2ve-...," it will be hashed and compared against the previously stored password (which is the SHA1 hash). However, entering the shorter "pkH8a0AqNbHcdw8GrmSp" password at the decryption stage will have the application directly compare this value to the stored password (which is, again the SHA1 hash). The HMAC collisions subsection of PBKDF2 on Wikipedia provides some more technical insight to interested readers. "PBKDF2 has an interesting property when using HMAC as its pseudo-random function. It is possible to trivially construct any number of different password pairs with collisions within each pair," notes the entry. "If a supplied password is longer than the block size of the underlying HMAC hash function, the password is first pre-hashed into a digest, and that digest is instead used as the password." But, the fact that there are now two possible passwords to the same ZIP does not represent a security vulnerability, "as one still must know the original password in order to generate the hash of the password," the entry further explains. Arriving at a perfect password An interesting key aspect to note here is, ASCII representations of every SHA-1 hash need not be alphanumeric. In other words, let's assume we had chosen the following password for our ZIP file during this experiment. The password is longer than 64 bytes: Bl33pingC0mputer-Sh0w-M3-H0W-t0-pR0Duc3-an-eNcRyPT3D-ZIP-File-in-the-simplest-way It's SHA-1 checksum comes out to be: bd0b8c7ab2bf5934574474fb403e3c0a7e789b61 And the ASCII representation of this checksum looks like a gibberish set of bytes—not nearly elegant as the alternative password generated by the researcher for his experiment: ASCII representation of SHA-1 hash of Bl33pingC0mputer... password BleepingComputer asked Sharoglazov how was he able to pick a password whose SHA-1 checksum would be such that its ASCII representation yields a clean, alphanumeric string. "That's why hashcat was used," the researcher tells BleepingComputer. By using a slightly modified version of the open source password recovery tool, hashcat, the researcher generated variations of the "Never Gonna Give You Up..." string using alphanumeric characters until he arrived at a perfect password. "I tested Nev0r, Nev1r, Nev2r and so on... And I found the password I need." And, that's how Sharoglazov arrived at a password that roughly reads like "Never Gonna Give You Up...," but the ASCII representation of its SHA-1 checksum is one neat alphanumeric string. For most users, creating a password-protected ZIP file with a choice of their password should be sufficient and that is all they would need to know. But should you decide to get adventurous, this experiment provides a peek into one of the many mysteries surrounding encrypted ZIPs, like having two passwords to your guarded secret. An encrypted ZIP file can have two correct passwords — here's why
  2. A Lightweight and Fast Archiving Software Written by Elena Opris on February 22nd, 2013 Bandizip is a straightforward compression tool which includes a long list of supported formats, whether we're talking about archive files (e.g. ZIP, RAR, CAB, 7Z, LZH), UNIX files types (e.g. TAR, GZ, TGS, LZMA), CD/DVD-related formats (e.g. ISO, IMG) or others (JAR, WAV, XPI). The interface of the application sets itself apart from other similar programs, thanks to its minimalistic appearance. Opening an existing archive can be done by using either the file browser or 'drag and drop' method. Unfortunately, Bandizip doesn't contain a built-in Explorer-based layout that would have allowed you to easily browse for files. However, this feature is available when it comes to creating a new archive. After selecting the files, you can specify the output destination, filename, type, splitting method, compression level and, optionally a password, in order to build the archive. Plus, Bandizip may be set to automatically delete the original files when the task is done. The program supplies advanced users with a multitude of configurable settings regarding compression (e.g. use the Unicode filename in ZIP files, save NTFS time information when compressing), file associations, context menu integration (select the entries to display), extraction (e.g. open the folder after extracting, set the default code page), and others (e.g. alter the default temporary location, move files to the Recycle Bin when deleting them). These options can be restored to their default values. Other features of Bandizip allow you to test the integrity of archives, rename files, edit archive comments, use a search function, customize the columns in the main application window, as well as switch to a different language for the GUI. The compression tool finishes a task briefly while using a moderate amount of CPU and system memory. Its responsiveness to keyboard and mouse commands is very good, and it includes a help file. We were unable to find any problems throughout our testing. All in all, Bandizip should meet the requirements of all users who prefer a fast, lightweight and efficient compression program. What's new in Bandizip 3.10 Build 10713: -Improved security of Bandizip. -Bugs fixed - Failed to extract splitted .ace files -Others HomePage Download Bandizip 3.10 Build 10713 Download Bandizip 3.10 Build 10713 ADMIN Download Bandizip 3.10 Build 10713 Portable
  3. ZArchiver (Freeware Version) ZArchiver - is a program for archive management. It has a simple and functional interface. ZArchiver lets you: - Create the following archive types: 7z (7zip), zip, bzip2 (bz2), gzip (gz), XZ, tar; - Decompres the following archive types: 7z (7zip), zip, rar, rar5, bzip2, gzip, XZ, iso, tar, arj, cab, lzh, lha, lzma, xar, tgz, tbz, Z, deb, rpm, zipx, mtz, chm, dmg, cpio, cramfs, img (fat, ntfs, ubf), wim, ecm, lzip, egg, alz; - View archive contents: 7z (7zip), zip, rar, rar5, bzip2, gzip, XZ, iso, tar, arj, cab, lzh, lha, lzma, xar, tgz, tbz, Z, deb, rpm, zipx, mtz, chm, dmg, cpio, cramfs, img (fat, ntfs, ubf), wim, ecm, lzip, egg, alz; - Create and decompress password-protected archives; - Edit archives: add/remove files to/from the archive (zip, 7zip, tar, apk, mtz); - Create and decompress multi-part archives: 7z, rar(decompress only); - Partial archive decompression; - Open compressed files; - Open an archive file from mail applications; - Extract splited archives: 7z, zip and rar (7z.001, zip.001, part1.rar, z01); Key features: - Multithreading support (useful for multicore processors); - UTF-8/UTF-16 supporting in filenames. Allows you to use national symbols in filenames; - No need for enabling multiselect mode. You can select files by clicking on the icon from the left of the filename; Mini FAQ: Q: What password? A: The contents of some archives may be encrypted and the archive can only be opened with the password (don't use the phone password!). Q: The program is not working correctly? A: Send me an email with detailed description of the problem. Q: How to compress files? A: Select all files, you want to compress, by clicking on icons (from the left of filenames). Click on the one of selected files and choose "Compress" from menu. Set desired options and press OK button. Q: How to extract files? A: Click on archive name and select suitable options ("Extract Here" or other). ADDITIONAL INFORMATION Updated October 7, 2019 Size Varies per device Installations 50,000,000+ Current version Varies per device Requires Android Version Varies per device Developer Visit website [email protected] Privacy Policy Traktoristov, 17 Ekaterinburg, Russia Download: Playstore Link ZArchiver Donate ZArchiver Donate - a special version of ZArchiver for donating to project. Advantages of Pro version: - Light and dark theme; - Password storage; - Image preview in archive; - Editing the files in the archive (see notes); ZArchiver - is a program for archive management. It has a simple and functional interface. ZArchiver lets you: - Create the following archive types: 7z (7zip), zip, bzip2 (bz2), gzip (gz), XZ, tar; - Decompres the following archive types: 7z (7zip), zip, rar, rar5, bzip2, gzip, XZ, iso, tar, arj, cab, lzh, lha, lzma, xar, tgz, tbz, Z, deb, rpm, zipx, mtz, chm, dmg, cpio, cramfs, img (fat, ntfs, ubf), wim, ecm, arc (freearc), lzip; - View archive contents: 7z (7zip), zip, rar, rar5, bzip2, gzip, XZ, iso, tar, arj, cab, lzh, lha, lzma, xar, tgz, tbz, Z, deb, rpm, zipx, mtz, chm, dmg, cpio, cramfs, img (fat, ntfs, ubf), wim, ecm, arc (freearc), lzip; - Create and decompress password-protected archives; - Edit archives: add / remove files to / from the archive (zip, 7zip, tar, apk, mtz); - Create and decompress multi-part archives: 7z, rar (decompress only); - Partial archive decompression; - Open compressed files; - Open an archive file from mail applications; - Extract splited archives: 7z, zip and rar (7z.001, zip.001, part1.rar, z01); Key features: - Multithreading support (useful for multicore processors); - UTF-8 / UTF-16 supporting in file names. Allows you to use national symbols in filenames; - No need for enabling multiselect mode. You can select files by clicking on the icon from the left of the filename; File modification in the archive it is the ability to update the file in the archive after changing it in an external program. To do this: open the file from the archive, select the application (if required), edit the file, save the changes, back to ZArchiver. Will be prompted to update the file in the archive when you return to ZArchiver. If for some reason are not prompted to update the file, the modified file can be found on the memory card in your Android / ru.zdevs.zarchiver.pro / temp /. Mini FAQ: Q: What password? A: The contents of some archives may be encrypted and the archive can only be opened with the password (don't use the phone password!). Q: The program is not working correctly? A: Send me an email with a detailed description of the problem. Q: How to compress files? A: Select all files, you want to compress, by clicking on icons (from the left or filenames). Click on the one of selected files and choose "Compress" from menu. Set desired options and press OK button. Q: How to extract files? A: Click on archive name and select suitable options ("Extract Here" or other). WHAT'S NEW 0.9.2 - Android 10 support; - Support of extracting EGG and ALZ; - Update in UI; - Bug fixes. 0.9.1 - 7zip updated to lates version; - fix crash. 0.9.0 - Extend Android 7/8 support; - 7zip updated to lates version; - LZ4 support; - Fix for Samsung device; - Support PIPE formats; - Update icon and theme; - Other fixes and improves. Updated October 7, 2019 Size Varies per device Installations 10,000+ Current version Varies per device Requires Android Varies per device Rights View details Developer Visit website [email protected] Privacy Policy Traktoristov, 17 Ekaterinburg, Russia Download: Playstore Link Direct Download: Site: https://anonfiles.com Sharecode: /L8c887d7o3/Zarchive-AllDevices_7z
×
×
  • Create New...