DESIGN AND DEVELOPMENT OF A BRUTE FORCE AND DICTIONARY ATTACK CRACKING TOOL ON ZIP FILE PASSWORDS

Student: Adela Ifiok Harry
Supervisor: Dr Yinka Omirinlewo
HOD: Dr Omo-Okhirelen Obabueki
Department of Computer and Information Science
Basic Medical and Applied Science
Trinity University, Yaba, Lagos State

Abstract

ZIP files are widely used for compressing and transporting sensitive data, making them a common target for cyberattacks. Despite password protection, many ZIP files remain vulnerable due to weak passwords and outdated encryption algorithms. This project focuses on the design and development of a ZIP password cracking tool that utilizes both brute force and dictionary attack techniques to test the strength of ZIP file protection. Developed using Python and Flask, the tool allows users to upload ZIP files, select an attack type, and monitor real-time cracking attempts via a web interface. The system includes modules for brute-force and dictionary attack logic, a password validation engine, real-time log display using Flask-SocketIO, and a user-friendly frontend. Testing showed that weak and common passwords could be cracked in seconds, while longer, more complex passwords resisted attacks effectively. This tool serves as an educational resource for understanding password vulnerabilities and the importance of strong encryption practices.

Full-Text Access Notice

In accordance with the NERD Policy on promoting peer-reviewed publication, public access to the full text of a project, thesis or dissertation is restricted for three years, allowing the author and supervisors sufficient time to pursue peer-reviewed publication. During this period, researchers with legitimate academic or research purposes may request authorisation directly from the author to enable NERD to release the indexed full texts of the work using the form below.

Request authorisation from the author