> For the complete documentation index, see [llms.txt](https://d3ndr1t30x.gitbook.io/breaking-things-a-junior-pentesters-guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://d3ndr1t30x.gitbook.io/breaking-things-a-junior-pentesters-guide/brute-forcing/cracking-passwords-on-zip-files.md).

# Cracking passwords on Zip files

### Using Fcrackzip

```
fcrackzip -u -D -p /usr/share/wordlists/rockyou.txt winrm_backup.zip
```

* `fcrackzip`: This is the command itself, used for cracking password-protected ZIP files.
* `-u`: This option tells `fcrackzip` to use the "unzip" method. It's essentially saying to try to unzip the file using the provided password list.
* `-D`: This option specifies the decryption mode. It indicates that the attack mode is dictionary-based, and `fcrackzip` will attempt to crack the password using words from the provided dictionary.
* `-p /usr/share/wordlists/rockyou.txt`: This option specifies the path to the dictionary file to be used for the dictionary attack. In this case, the famous "rockyou.txt" wordlist is used. This wordlist is commonly used in penetration testing and password cracking due to its extensive collection of passwords.
* `winrm_backup.zip`: This is the name of the ZIP file that you want to crack. Replace this with the actual filename of the ZIP file you are targeting.

<figure><img src="https://2288465892-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FDIt8oNqqCdL9Vt3UR8bR%2Fuploads%2FmQ2b8P74ogKeCWYRs7mo%2Fimage.png?alt=media&amp;token=eb62c78d-747a-46ca-b314-5b7896a9b718" alt=""><figcaption></figcaption></figure>