Skip to content
View in the app

A better way to browse. Learn more.

ResHax

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.
Help us keep the site running.

Retrieving ZIP passwords from games - the zero skills way

Featured Replies

  • Author
  • Localization

raykingnihong, posted Wed Dec 24, 2014 11:10 am (2282)


Hi aluigi my friend very good tutorial I am learning
  • Author
  • Localization

CriticalError, posted Mon Jun 29, 2015 2:35 pm (5997)


Hello luigi many thanks for the great tutorial, I download this game for understand that, and really all be ok to the last step, and I stuck there, after run zip password script I got no password, all scanning going well but no found nothing so whats wrong?

Image
  • Author
  • Localization

aluigi, posted Mon Jun 29, 2015 3:33 pm (6000)


There is something really very strange in that message, it looks like your script is corrupted.
The reason is simple, your messages are truncated so the password was found but you cannot see it.

Example:
the -> the error "incomplete input file number 1" means that no password was found
FILE -> FILE: name of the file
Password -> Password found: followed by the textual password on the next line
hex -> (hex visualization for debugging)
  • Author
  • Localization

CriticalError, posted Mon Jun 29, 2015 4:53 pm (6004)


ok so now all be working fine, I redownload script and work very well, now my question is, I try it in another game, I got all files but in the end I got it, thats mean the password is not stored in .exe?

PS: about the dump.dat the only way to dump this one to convert to txt password dump is via strings, because exestringz for some reason when try dump it it only stuck there in console like dumping, but it never ends.

Image
  • Author
  • Localization

aluigi, posted Mon Jun 29, 2015 5:00 pm (6005)


If you don't receive the "Password found" message, it means that it's not in the exe. It may happen sometimes so don't be surprised :)

strings is ok too.

The image you posted show that you selected passwords_list.txt as input file which is wrong, you must select the ZIP protected by password as input file (passwords_list.txt is loaded automatically by the script).
  • Author
  • Localization

romli1987, posted Tue Nov 22, 2016 6:28 am (18945)


Hi guys, I'am newbie in programming,
and i want to try edit some *.xml file on archive this game
https://www.awem.com/cradle-of-rome-2.html (Cradle Of Rome2)
and yes I can extract those archive (resources.pak) with this bms script
http://aluigi.altervista.org/bms/awem.bms
but when I re-importing (using awem.bms) always failed.
I try open that .pak file with peazip always ask for password.
may i ask to you guys to retrieve password for this game (resources.pak), or make a script for re-importing?
sorry for my bad English.

Many thanks.
  • Author
  • Localization

romli1987, posted Wed Nov 23, 2016 1:50 am (18967)


aluigi wrote:
If it's really a ZIP archive then first check the "pak"-related passwords listed here:
http://aluigi.altervista.org/papers.htm#info


thanks for a link, and i have check for Cradle Of Rome 2 [resources.pak] not found.
Ctrl f and type "Cradle" [without Quotes] only found 1 result [to these link http://aluigi.altervista.org/papers/uniginex.zip]
help me please..
thanks for reply..
  • Author
  • Localization

aluigi, posted Wed Nov 23, 2016 9:18 am (18988)


You made a big mess and you are 100% OT.

resources.pak is a AWEM archive that you correctly extracted with my script.

If you extract the files in the same folder of the game, delete resources.pak and run the game, it may work.
"If" it doesn't work then you can try the reimport feature of quickbms.
If the reimport feature doesn't work correctly or you are not satisfied with it (it has some limits unfortunately) then there are no solutions ready to use.
In this case the script is not valid for reimporting.

Anyway this is TOTALLY unrelated to the ZIP files of this topic, so do NOT post here.

P.S.: I confirm that the game works perfectly with the files extracted in the game folder and resources.pak is deleted :D
  • Author
  • Localization

romli1987, posted Thu Nov 24, 2016 1:31 am (19001)


aluigi wrote:
You made a big mess and you are 100% OT.

resources.pak is a AWEM archive that you correctly extracted with my script.

If you extract the files in the same folder of the game, delete resources.pak and run the game, it may work.
"If" it doesn't work then you can try the reimport feature of quickbms.
If the reimport feature doesn't work correctly or you are not satisfied with it (it has some limits unfortunately) then there are no solutions ready to use.
In this case the script is not valid for reimporting.

Anyway this is TOTALLY unrelated to the ZIP files of this topic, so do NOT post here.

P.S.: I confirm that the game works perfectly with the files extracted in the game folder and resources.pak is deleted :D



whaaaaaaaaa thanks you very much, I will try that trick..
and I am so SORRY for wrong post :( ...

note : you can delete my post in this topic :D
  • Author
  • Localization

okami29, posted Fri Mar 10, 2017 11:32 am (21346)


Hi I tried to dump Wolcen but I have this error message :
Is it because it's a 64 bit process (I think) :
Image
  • Author
  • Localization

aluigi, posted Fri Mar 10, 2017 11:56 am (21349)


Yeah, you have to use alternatives for 64bit processes.
The Windows Task Manager (taskmgr) has a "Create Dump File" when you right-click on a process in the Processes tab, the dump is big but it's perfect for your needs.
Process Explorer has a similar feature with the additional possibility to create a smaller dump that probably doesn't contain the key you need, so you have to use the "Create Full Dump" option.
ProcDump is the same of the previous 2 suggestions: procdump -ma process_name
The full dump is useful if the key is generated at runtime instead of being hard-coded in the executable.
There are many tools that allow to dump only the main module of the process and not the whole memory without attaching debuggers, feel free to search on Google.
  • Author
  • Localization

Parody, posted Fri Mar 10, 2017 3:23 pm (21353)


How to do this with an android game?
  • Author
  • Localization

okami29, posted Fri Mar 10, 2017 5:44 pm (21359)


My dump file size is more than 3GB then when using exestringz I have an error Not enough space.
What can I do ?
  • Author
  • Localization

Donut duck, posted Sat Dec 23, 2017 11:17 pm (30992)


How to do his for Mac? I need password for btd battles 4.8.2 for Mac!
  • Author
  • Localization

Changaa, posted Sat Mar 10, 2018 12:08 am (33008)


Please Help. I am loading the passwords_txt and everything, it scans, but it doesnt say it couldnt get a password or anything. It goes straight to the "files found". Thx!
  • Author
  • Localization

Trystar007, posted Sat Apr 14, 2018 3:00 pm (34035)


Ok this is confusing me when i launch dumproc i cant specify the game because it closes immediately am i doing something wrong? and when i get a dump dat using windows task manager the file size is 0 bytes which makes no sense please help.
  • Author
  • Localization

aluigi, posted Sat Apr 14, 2018 3:15 pm (34040)


The reasons behind dumproc may be two: process is "protected" (anticheat and so on) and/or is 64bit (dumproc is 32bit), probably both.
Try Process Explorer launched as Administrator, select the process, "Create Dump" and try Mini dump first, Full dump may be better in some situations.
dumproc should be no longer used.

You have not specified the name of the game so the other users can't help you much but your other posts are about Fortnite, please note that this topic is completely useless for finding the AES key of that game. Just trying to save your time :)
  • Author
  • Localization

Trystar007, posted Sat Apr 14, 2018 5:52 pm (34048)


Thank you for replying and notifying me that this wont work for Fortnite, So that brings me to another question how are other people getting the fortnite keys? The key for the game is constantly changing so could you direct me to a post that could help me with getting the key? thanks again
  • Author
  • Localization

onelove1210, posted Sun Jun 24, 2018 8:49 am (36164)


Sorry to bump it up. Is there any possible method to retrieving Zip/7z password from Android games? Its archives are packed by 7z with password but I don't know what file or dll contains the password information to upload as a sample :?
  • Author
  • Localization

aluigi, posted Sun Jun 24, 2018 9:46 am (36172)


@onelove1210
Very generic. Post in the Game Archive section providing full name of the game and samples.
  • Author
  • Localization

onelove1210, posted Sun Jun 24, 2018 12:12 pm (36180)


aluigi wrote:
@onelove1210
Very generic. Post in the Game Archive section providing full name of the game and samples.


best idea though :lol:
  • Author
  • Localization

aluigi, posted Sun Jun 23, 2019 2:59 pm (48989)


Just a note about zip.bms and zip_pwd_scan.bms
I have noticed that the AES encryption doesn't work for some unknown reasons (the algorithm is not launched at all).
I will investigate it, luckily the ZIP archives used in games are often based on zipcrypto.
I tried older versions of quickbms and the error is the same.
I'm 100% sure to have tested it when I implemented the gladman AES.
  • Author
  • Localization

Ezekiel, posted Sun Jul 21, 2019 2:34 pm (49403)


sup Aluigi, they sent me from xentax here...

I'm desperate to unlock this zip but, your method gave me millions of passwords and they dont work

https://i.imgur.com/ayhXUjF.mp4

80 MB Zip https://drive.google.com/file/d/144b-eA ... Wxw4e/view
I'm wiling to pay to whoever find password for this / PAY- PAL only
Guest
This topic is now closed to further replies.

Account

Navigation

Search

Search

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.