Wednesday, April 14, 2021

WonderShare (iSkysoft) Backup (*.bak) Password Cracking & Crackers

Several WonderShare / iSkysoft tools make these backup (*.bak) zip files that are encrypted with their passwords, for no reason other than to make people buy their products. 

At XDA in a thread "File encrypted! How can I open it!! HELP!!" I released several tools trying to help with this problem.

The 1st tool package "WonderShare Zip Password Tester" just tried to guess passwords using  patterns. It was a slow and didn't help Akira (AkiraPerera04, OP) . The 2nd package "WonderShare Zip Password Tester using fcrackzip" was faster, but as it did the same as previous, it didn't help either. What eventually did help, was program called "bkcrack" ("pkcrack" probably would work too). The 3rd "WonderShare.bak Zip Cracker using bkcrack" and 4th "WonderShare.bak Zip Cracker II using bkcrack" versions use it to find out the encryption keys that then can be used for decrypting that darn backup file.

Besides the cracking packages mentioned, I made a Windows 7-zip versions that use keys along passwords when encrypting and decrypting zip files (a Linux version existed already). Made a bit hacked versions of them as well - that eventually weren't needed.. 

 ===============================================================
 
 WonderShare.bak Zip Cracker II using bkcrack - by CXZ / CXZa
 http://cxzstuff.blogspot.com
 
 ===============================================================
 
 Running Bkcrack . . .
 Target file: DeviceInfo.list_CXZa.zip
 
 ===============================================================
 
 bkcrack 1.2.1 - 2021-04-10
 [10:58:05] Z reduction using 94 bytes of known plaintext
 100.0 % (94 / 94)
 [10:58:06] Attack on 87842 Z values at index 12
 Keys: dd6c17f1 0402a80f 900cf09e
 24.8 % (21826 / 87842)
 [10:58:48] Keys
 dd6c17f1 0402a80f 900cf09e
 
 ===============================================================
 
 The keys have been saved into the file:
 .\DeviceInfo.list_CXZa_keys.txt
 
 ===============================================================
 
 "Change" the WonderShare backup's password now ?
 (a new zip file will be created to the same folder)
 
 [SPACE]+[ENTER] = Don't create a new zip file now.
 [ENTER] = An empty password. Easiest to remember.
 Password:  1234
 
 ===============================================================
 
 Running Bkcrack . . .
 
 ===============================================================
 
 bkcrack 1.2.1 - 2021-04-10
 [10:59:06] Writing unlocked archive DeviceInfo.list_CXZa-cracked
 _[pw-1234].zip with password "1234"
 100.0 % (1 / 1)
 Wrote unlocked archive.
 
 ===============================================================
 
 All Done !
 
 ===============================================================
 
 Press any key to continue . . .
  

Download links: