Author
nudge96
VIP club member
Added: Mar 17, 2009 5:47 pm
Do any of you know a RAR utility that can try to open a password protected RAR file using a text list of passwords.
I add passwords to a textfile as I get them but have not found a program that will use the textfile to try to crack a RAR pass.
nudge96
VIP club member
Added: Mar 19, 2009 12:11 pm
It seems like such an obvious program to write.
There are password crack programs but not one focused on RAR with this feature. Damn.
NM8
VIP club member
Added: Mar 19, 2009 6:30 pm
Yes and No... If I remember correctly there is software out there for doing this with Zip file, but as for other files.

Im not sure. Google?
Launder
Respected Poster
Added: Mar 20, 2009 9:11 pm
Look if you have a zip and need the password but don't know you're SOL I tried one of those programs back in the day and it was garbage. If you want to try it cool but those programs are anything but accurate.
Monkey D. Ruffy
Very Respected VIP club member
Added: Mar 20, 2009 11:28 pm
Yeah, I had one as well, worked with brute force and told me I've to wait more than a year for any results.

Deleted both: the prog and the rar.

Maybe there are some programs, that will work with word lists, but I don't know one, sorry.

I save the whole links with passwords since then and unrar/sort them later.

Monkey D. Ruffy
nudge96
VIP club member
Added: Mar 21, 2009 3:01 am
I'll try to explain a different way.
Add the passes you see when visiting (and DLing) from forums to a text file. Then when you miss one you would be able to try the usual suspects automatically. This would be very useful.
These brute force programs should add the ability to suggest passes by using a textfile as input.

Attached, if it works, is a textfile of passes.
Because of forum rules, anything that looks like a web address has been removed from the list.
Shakesfloyd
Poster
Added: Mar 21, 2009 3:12 am
Monkey D. Ruffy wrote:
Yeah, I had one as well, worked with brute force and told me I've to wait more than a year for any results.

Deleted both: the prog and the rar.

Maybe there are some programs, that will work with word lists, but I don't know one, sorry.

I save the whole links with passwords since then and unrar/sort them later.

Monkey D. Ruffy


I had the same exact problem, a year ago and had to delete the file cause the program would go on forever trying to find the pass Sad, hope some better programs are made in the near future...
Monkey D. Ruffy
Very Respected VIP club member
Added: Mar 21, 2009 11:52 am
nudge96 wrote:
I'll try to explain a different way.
Add the passes you see when visiting (and DLing) from forums to a text file. Then when you miss one you would be able to try the usual suspects automatically. This would be very useful.
These brute force programs should add the ability to suggest passes by using a textfile as input.

Attached, if it works, is a textfile of passes.
Because of forum rules, anything that looks like a web address has been removed from the list.


You have a pass list (similar to a word list) and you're searching for a rar cracking program, that is able to use this list instead of/or as addition to brute force?!?

I know these word lists for paysite cracking programs, but never have heard about a rar/zip cracking one, sorry.

Monkey D. Ruffy
nudge96
VIP club member
Added: Mar 21, 2009 2:19 pm
Right. It is so obvious a program to write.
Most uploaders are repeaters. They also tend to use the same password.
What do you think this forum has? 100 regular posters?
esteban_55
Respected Poster
Added: Mar 21, 2009 2:52 pm
That was a brilliant idea nudge96!!

Though most password crackers should be able to do what you described, that would be overkill. What we need is just a simple password checker.

I have attached my version of it. It is quite a mess but with it i was able to find the passes for a bunch of rar files which were rotting on my disk for ages.
The instructions on how to use it are too long for a post so i included a readme file. Reading it is recommended Wink
Since attaching bat files is not allowed in this forum, i had to change the extension. So change findpass.bat.txt to findpass.bat after downloading.
Furthermore i allowed myself to merge your passes with the ones i collected over time and attach them too. I hope thats ok.

Standard disclaimer for all freeware: Use it at own risk Smile

nudge96
VIP club member
Added: Mar 22, 2009 11:55 am
Thanks for your post, esteban_55 !
I did not think about the fact that RAR could receive a password on the commandline.
Doh! So a batchfile is a kludge way to do it.
I'll look at your effort and try it!

Edit:
I've read your readme and bat file.
You have given some thought to this Smile

I have the program Take Command installed.
It has a much richer batch language.
I used to be pretty good with 4DOS batch commands but that was in the 1980 & 90s Smile
I'll see what I can do to help with this.
Only thing that comes to mind so far is to see if error level checks work effectively with unrar.
If they do I guess you would have used them Sad
esteban_55
Respected Poster
Added: Mar 22, 2009 4:05 pm
You're welcome. It was a nice saturday morning exercise. After i found my first pass i smelled blood Smile

I actually looked into errorlevels, but was unable to get them to work properly. "State of the Art" is not what comes to my mind regarding my batch programming skills.
Exit codes were working fine with perl though. So i guess they could work in a batch script as well. Question is whether it is still possible to catch correct passwords in corrupt or incomplete rars. The exit code might be the same as with a wrong pass error.

nudge96
VIP club member
Added: Mar 22, 2009 7:53 pm
Unrar just returns errorlevel 3 so it is not useful.
This is incredibly stupid so I will check further.
OK...using Find to check for "ALL OK".

One correction I had to make was to remove the " " from the password in the line:

%ProgramFiles%\Unrar\unRAR.exe t -p"%%i" %%f >> log.%%f.txt

unrar does not want them and spaces are not allowed in passes anyway.

I have a separate folder with all the troublesome RARs so I've put the batchfile and a copy of unrar.exe in there for now.
So far, my version of the batchfile is:
---

@echo off
cls
set file=%1

for %%f in (%file%) do (
echo RARfindpass result for archive %file% > log_%%f_.txt
for /F "delims=." %%i in (pass2.txt) do (
echo. >> log_%%f_.txt
echo -------------- >> log_%%f_.txt
echo testing "%%i" >> log_%%f_.txt
unRAR.exe t -p%%i %%f >> log_%%f_.txt
)
)
echo.
Find /c "All OK" log_%file%_.txt
rem IF %errorlevel% == 0 "C:\Program Files\TextPad 5\textpad.exe" log_%file%_.txt
NotePad log_%file%_.txt

---
I will convert to 4DOS batch language and check for "ALL OK"

Redirecting all screen output in the FOR loop to nul will speed things up.

If the log can be cleaned up to just include the pass that results in ALL OK that would help too.

What is really slow is testing all jpg files in an archive. I'm looking for a way around that.

I think running all this from a Take Command environment makes sense.
AltonTowers
Very Respected Poster
Added: Mar 24, 2009 12:28 pm
Google says that there are quite a few programs that accept a password list - they call it a dictionary.

But as an exercise, I tried producing my own, using the unrar DLL and c# wrapper class available from the winRAR site. It works ok if the archive has the filenames encrypted, but it doesn't work if not. I'll keep playing...
mros
I'm probably spamming
Added: Mar 24, 2009 1:00 pm
this would do the same thing on linux
Code:
#!/bin/bash
STATUS=1 #any non zero number will do
COUNT=0
IFS='
'
for i in `cat archive_passwords.txt`;
do
        unrar x -p"$i" file.rar > /dev/null 2>&1
        STATUS=$?

        if [ $STATUS -eq 0 ]; then
                echo "Password was $i."
                exit $STATUS
        else
                echo  "$i"
        fi
        let COUNT+=1
done

echo
echo Count: $COUNT
exit $STATUS