SOLVED need to decrypt a RAR that I know the components of

[Onceler]

I have an old RAR that I have that I know some of the password's possibilities.
Is there software that can take this into account?
All of the software that I have tried either uses brute force or dicionary and the later only trys to use a single word.
The problem is I know the words of the password but do not know the order in which they are or what they are.
But I am confident that I possess the correct formation of words and numbers I just have to find the right combination.
Can someone who knows how help me out please?
Thanks

 

[lxskllr]

Try this. I haven't used it, but it looks like you can set fine grained definitions for cracking. The documentation looks decent also.

http://www.crark.net/

 

[Onceler]

Thanks I'll look into it.
Anyone got any easier ones than this? I can't seem to get it to work right I read the readme and followed the instructions but it doesn't want to work.

 

[Onceler]

I tried the instructions at http://adaywithtape.blogspot.com/2010/02/rar-password-cracking-with-crark.html
but it doesn't seem to work
does anyone know how to properly modify my password file to get my fragments to work?

 

[Onceler]

Or do I need another program,every app I have tried will use the letters and digits only not in the orders I give them.
Anyone know of a program that can use a word list to search all possible Combinations of the words there are 18 of them?

 

[lxskllr]

Maybe let it run longer? Brute forcing can take some time. How long have you let it run? Are you SURE about the password characters, including CasE?

Here's a program for Linux, but if you aren't familiar with using Linux, there's a lot of steps you have to go through. It looks easy, but for someone unfamiliar, I imagine it appears daunting. If I were to give it a try, I'd install Xubuntu on a thumb drive, and then follow the instructions on the page...

http://www.ubuntu-unleashed.com/2008/04/howto-crack-rar-7z-and-zip-files-with.html

You could also poke around the Backtrack Linux site. I'm not sure about every tool they have, but it's a distribution for penetration testing.
http://www.backtrack-linux.org/

 

[Onceler]

Thanks
It is too big a password to use brute force, it would take years.
I am positive about the case and the letters and numbers. I will look into those links and give them a try.
Thanks again.

 

[Onceler]

Thanks again crark worked after someone helped me out it turns out that the password was a combination of a set of numbers then a nonsense word then another set of numbers.
These were all known to me but I didn't know the right combination or combinations from my word list.
The first one took about three hours
the second one was much faster.

 

[lxskllr]

Glad you got, and thanks for the update. How do you like that program? Is it fairly easy to use?

 

[Onceler]

I like the program now that I know how to use it(thanks to Tape @ http://adaywithtape.blogspot.com/2010/02/rar-password-cracking-with-crark.html )
it was really hard trying to figure it out but now that I know what to do I will be keeping a copy near at hand at all times.
did I mention it was fast? It cracked a 15 char pw in three hours!
It has a learning curve. I am used to doing things from the command prompt so that was no big deal what was however was getting it to only brute force the words that I supplied and not go through the a-z 0-9 thing.
It is a great program.

 

[TAPE_RULEZ]

Thanks for the linkage glad able to help with the solution.

The post is somewhat out of date, I may have to make a new post
with updates on possibilities of archive cracking, but crark is definately extremely powerful and fast.

However if you are the Anonymous that I think you are, the wordlist
used was not a Bruteforce wordlist, but one based on existing sets
of known (valid) words in the passphrase.

A 15 character wordlist, without any idea on what it looks like,
would be close to impossible to crack .. (although in theory and
with increasing speeds possible with GPUs.. who knows ? right ?! )

 

[Onceler]

Yes I was that anonymous person.
It worked for me because I use different segments for all my passwords.
I may have like 20 of them but rearange in different combinations.
I'm gratefull for the patience and the help that you have given to me.
Since I will be learning how to use wxWigets when I can I will code a GUI for it(it might take a month).
Thanks

 

[TAPE_RULEZ]

Yours was an interesting issue, as the question on how to combine one
wordlist with another comes up quite frequently believe it or not.

There is a way with a bit of code ;

awk > output.txt 'NR == FNR {
l2[FNR] = $0
fnr = FNR; next
}
{
for (i = 0; ++i <= fnr
print $0 l2
}' file2.txt file1.txt

the above smiley == ; followed by )

The above from some requests from unix.com and included in
the WordListManipulator (WLM)
http://www.mediafire.com/file/aidmtkw9ub8rv62/wlm_v0-2
(I am starting a post on some explanation on wordlist manipulation options here;
http://adaywithtape.blogspot.com/2011/07/wordlist-manipulation-revisited.html
Which if using a VM you can test nicely with BT5 (written based on BT5)

Anyways, sorry if I sometimes appear agitated I like peeps to try themselves as really that is 90&#37; of getting there.

And have fun with the working out

 

[Onceler]

Hey I can't get back on your site any more, what happened?

 

[TAPE_RULEZ]

Hey, weird, seems OK from my end.

Is it working today ?

 

[TAPE_RULEZ]

Hey there,

Should up and running fine, but pls send a msg if u continue to have trouble ..
not sure what was up, but still working fine my end!

 

[Onceler]

I am still having trouble, I am begining to beleive that my isp is deliberatly blocking that page.
Thanks

 

[lxskllr]

Try Tor, and see if that gets you in.

 

[Onceler]

Thanks
It works fine now.