Brute-force/Dictionary attack: john --wordlist=rockyou.txt amirah.hash
If the password isn't in a wordlist, check the challenge description for clues (e.g., "Amirah's favorite color") or look for Known Plaintext Attacks using Pkcrack if you have an unencrypted version of one file inside the ZIP. 4. Steganography & Hidden Data Download File Amirah.zip
If the file is encrypted (indicated by a * next to the filename in some tools), you must recover the password. John the Ripper or Hashcat . Process: Extract the hash: zip2john Amirah.zip > amirah.hash Brute-force/Dictionary attack: john --wordlist=rockyou
