This is where Kali truly shines. Auditors often encounter password-protected ZIP files during penetration tests (e.g., password-protected phishing attachments, corporate data dumps). Kali provides several ways to recover or test ZIP passwords.

First, extract hash with zip2john (same as above). Then run hashcat:

| Tool | Format | Best for | Command example | | :--- | :--- | :--- | :--- | | zip | .zip | Cross-platform sharing, password protection | zip -r out.zip folder/ | | gzip | .gz | Single files, quick compression (Linux native) | gzip large.log | | tar + gz | .tar.gz | Backups, preserving permissions | tar -czvf archive.tar.gz folder/ | | 7z | .7z | Highest compression ratio, AES-256 | 7z a archive.7z folder/ -pSECRET |