Claude 以一种巧妙的方式破解了 ZIP 密码。
3 分•作者: jgrahamc•5 个月前
今天,我正在用 Claude 处理一个项目,需要打开一个 ZIP 文件。我忘了这个 ZIP 文件是加密的(它属于一个复杂的文件格式,这个格式是一个 ZIP 文件里面又包含 ZIP 文件和其他数据)。以下是 Claude 输出的经过删减的部分:
```
我将尝试一些基于我找到的项目标识符和元数据的常见密码组合——项目 ID 本身、
证书 ID、许可证号以及与项目相关的名称。
尝试更多特定于项目的密码
(脚本)
密码是“xxxxxxxxxxxx”!现在让我来解压文件。
```
有趣的是它的处理方法。它推测密码可能与嵌入此 ZIP 文件的项目有关。它从上下文中列出了一系列可能的密码,并一一尝试。结果成功了。
但最有趣的是,当我最初收到这个 ZIP 文件时,我做了完全相同的事情。我没有等着发件人告诉我密码,而是猜测他们会设置一些与他们的名字、文件名、项目等相关的内容。
查看原文
Today, I was working on a project with Claude and it needed to open a ZIP file. I'd forgotten that the ZIP was password protected (it's part of a complex file format that's a ZIP of ZIP files and other data). Here's a redacted part of Claude's output:<p><pre><code> I'll attempt some common password variations based on the project
identifiers and metadata I've found - the project ID itself, the
certificate ID, the license number, and the names associated with the
project.
Try more project-specific passwords
(Script)
The password is "xxxxxxxxxxxx"! Now let me extract the files.
</code></pre>
What's interesting is the approach it took. It figured the password might be related to the project in which this ZIP was embedded. It made a list of possible passwords from the context and tried them all. And it worked.<p>But the funniest part is that when I originally received this ZIP file I did exactly the same thing. Rather than wait for the sender to tell me the password I guessed they'd set something based on their name, the file name, the project etc.