File conversion tool

Extract a ZIP, RAR or 7z hash

Turn an encrypted archive into a standard audit hash in your browser, ready for an authorized password recovery or strength test.

Extract an archive hash Discuss your audit

Upload a password-protected archive

Use the same browser workflow for ZIP, RAR and 7z files. The converter follows the familiar zip2john, rar2john and 7z2john output conventions.

From extraction to remediation

The extracted line can be tested against an approved wordlist, rules, masks or targeted search. Record the result in your security assessment, reset weak credentials and retest the updated archive.

Example prefix: $zip2$… / $rar5$… / $7z$…

Archive hash formats

The extractor relies on rar2john, zip2john and 7z2john from the John the Ripper project.

RAR archives - Hashcat modes 12500 (RAR3-hp) and 13000 (RAR5)

RAR3 output looks like $RAR3$*type*hex(salt)*hex(partial-file-contents):type::::. Type 0 stands for archives created with rar -hp, which encrypts both file data and headers:

$RAR3$*0*45109af8ab5f297a*adbf6c5385d7a40373e8f77d7b89d317

Type 1 stands for archives created with rar -p, which encrypts only the files.

ZIP archives - Hashcat mode 13600 (WinZip)

Two formats can be produced. zip2 is AES-256 encryption, used by modern tools such as 7-Zip and WinZip. pkzip2 is ZipCrypto, an older and weaker encryption.

$zip2$*0*3*0*b5d2b7bf57ad5e86a55c400509c672bd*d218*0**ca3d736d03a34165cfa9*$/zip2$
or
$pkzip2$2*1*1*0*8*24*8058*9125*1b9e7c93b129bd495fe107c89ffbf222bc39303ae92ab534e5cb5013db97bb538945fcb1*2*0*188*2dc*33d1d8af*3c1*2c*8*188*33d1*90ed*.....*$/pkzip2$::::

7-Zip archives - Hashcat mode 11600

The 7-Zip archive header can be encrypted too, which hides the file names inside the archive: use the -mhe switch on the command line, or tick "Encrypt filenames" in the GUI.

$7z$0$19$0$salt$8$f6196259a7326e3f0000000000000000$185065650$112$98$f3bc2a88062c419a25acd40c0c2d75421cf23263f69c51b13f9b1aada41a8a09f9adeae45d67c60b56aad338f20c0dcc5eb811c7a61128ee0746f922cdb9c59096869f341c7a9cb1ac7bb7d771f546b82cf4e6f11a5ecd4b61751e4d8de66dd6e2dfb5b7d1022d2211e2d66ea1703f96

Responsible use

Hashcat and John the Ripper are powerful and can be misused. Use them only with permission, and follow local laws and organizational security policies. Misuse can have serious legal consequences.

Credits

Credits go to the John the Ripper project.

Need a complete password audit?

Use the extracted value in an authorized test with OHC’s GPU-accelerated recovery service.

Start an authorized audit