Claude 以一种巧妙的方式破解了 ZIP 密码。

3作者: jgrahamc5 个月前
今天,我正在用 Claude 处理一个项目,需要打开一个 ZIP 文件。我忘了这个 ZIP 文件是加密的(它属于一个复杂的文件格式,这个格式是一个 ZIP 文件里面又包含 ZIP 文件和其他数据)。以下是 Claude 输出的经过删减的部分: ``` 我将尝试一些基于我找到的项目标识符和元数据的常见密码组合——项目 ID 本身、 证书 ID、许可证号以及与项目相关的名称。 尝试更多特定于项目的密码 (脚本) 密码是“xxxxxxxxxxxx”!现在让我来解压文件。 ``` 有趣的是它的处理方法。它推测密码可能与嵌入此 ZIP 文件的项目有关。它从上下文中列出了一系列可能的密码,并一一尝试。结果成功了。 但最有趣的是,当我最初收到这个 ZIP 文件时,我做了完全相同的事情。我没有等着发件人告诉我密码,而是猜测他们会设置一些与他们的名字、文件名、项目等相关的内容。
查看原文
Today, I was working on a project with Claude and it needed to open a ZIP file. I&#x27;d forgotten that the ZIP was password protected (it&#x27;s part of a complex file format that&#x27;s a ZIP of ZIP files and other data). Here&#x27;s a redacted part of Claude&#x27;s output:<p><pre><code> I&#x27;ll attempt some common password variations based on the project identifiers and metadata I&#x27;ve found - the project ID itself, the certificate ID, the license number, and the names associated with the project. Try more project-specific passwords (Script) The password is &quot;xxxxxxxxxxxx&quot;! Now let me extract the files. </code></pre> What&#x27;s interesting is the approach it took. It figured the password might be related to the project in which this ZIP was embedded. It made a list of possible passwords from the context and tried them all. And it worked.<p>But the funniest part is that when I originally received this ZIP file I did exactly the same thing. Rather than wait for the sender to tell me the password I guessed they&#x27;d set something based on their name, the file name, the project etc.