title: how do you get the password hash of a zip file?
body: <p>I was doing a <a href="https://en.wikipedia.org/wiki/Wargame_(hacking)" rel="nofollow noreferrer">capture the flag</a> sample, and they gave me the file's hash. I ran it through <a href="https://en.wikipedia.org/wiki/John_the_Ripper" rel="nofollow noreferrer">John The Ripper</a> and I got my password for the sample.</p>
  <p>The thing is, the hash was given to me. Is there a way to find the hash of that file if it weren't given?</p>
  <p>There are two points that need to be resolved to beat a password: The hash and the encryption algorithm.</p>
  <p>I have been practicing with password protected zip files, so I figured it was using zip 2.0 or something or some sort of AES, I can figure that out with the help of Google.</p>
  <p>What I can't find out however, is how to access the metadata for the zip file for that hashed data. Since it is a standard, zipping something doesn't need to have the algorithm in it for when storing the password. However, there needs to be some sort sort of hash.</p>
  <p>Does anyone know how, with this example of a password protected zip file, this is done?</p>
  <p>I'm using a MacBook Pro right now.</p>