WinRar 3.4x password recovery?

sightseeing512 · **Joined:** 27 Dec 2007 15:33 **Posts:** 8

Hi Luigi.
I know it's not your usual sort of password recovery but are you aware of any flaws in WinRar's encryption from version 3.4x?
I was trying to find a file my dvd burner some how corrupted on me in my archives & I found a password protected RAR file from 2004 with the file in it. I've long forgotten the password apparently & the bruteforce programs say it would take years to check the string length I probably used (4 to 8). I know the file name & approximate size & I always use a certain rule set when making a password so I can guess what style of password I used be but there's still hundreds of possibilities.
I'm hoping there's a flaw in that version but haven't tracked anything down yet.

Sethioz · **Posted:** 26 Jul 2008 15:05

dont think that Luigi is into password cracking :)
but 4-8 all_alpha_num would take like 1-2 days only. i've cracked lots of MD5 hashes (same as cracking password itself). with bruteforce or wordlists it goes like 3-4mil pass per second so its fast, but i really cant suggest any good cracker for winrar. i used passwordspro and cain, but i doubt that those has feature that allows you to crack winrar.

aluigi · **Posted:** 26 Jul 2008 15:38

I'm not aware of weakness in the RAR encryption.
Anyway if your password was so short you could be able to recover in a "human" amount of time (I don't have programs to suggest since this is not my field)

Luigi Auriemma

WinRar 3.4x password recovery?