Tags: rockyou.txt fcrackzip bruteforce zip misc
Rating:
**Description**
Hey! Here's the code for your free tickets to the rock concert! I just can't remember what I made the password...
**Knowledge required :**
1) fcrackzip tool (or other zip password cracking tool)
**Solution:**
1) Downloading the file reveals it to be zip
2) Trying to unzip it requires a password
```
Archive: we_will_rock_you.zip
[we_will_rock_you.zip] we_will_rock_you/flag.txt password:
```
3) The first thing to try is to bruteforce it.The challenge name actually hints to the rockyou.txt wordlist.
4) Bruteforcing the password with fcrackzip using the rockyou.txt wordlist reveals the password :
```
fcrackzip -b -D -p /usr/share/wordlists/rockyou.txt -u ./we_will_rock_you.zip
PASSWORD FOUND!!!!: pw == michigan4ever
```
5) Unzipping the file with the password gives us the flag
```
wctf{m1cH1g4n_4_3v3R}
```