• The first step is to create a hash file of our password protected zip file. Use the zip2john utility to generate one.

$ zip2john secret_files.zip > hash.txt

• The password cracking process will actually be launched against the hash file, not the zip file. Use the following command to begin the process with john

$ john hash.txt

• For additional options, check John’s help output.