Posts: 1
Threads: 1
Joined: Apr 2016
I'm working with a 97-2003 office document and when I run the office2hashcat.py I get a something I'm not sure what to do with.
XOR obfuscation detected, Password Verifier : 18e787d1 (made up numbers, but it's the same length as the output)
Can anyone tell me what's going on here?
Thanks
Posts: 2,936
Threads: 12
Joined: May 2012
The document is not encrypted, just password protected, so there's nothing for oclHashcat to crack. You can either just remove the password and open the document, or XOR the password to un-obfuscate it.
Posts: 1
Threads: 0
Joined: May 2017
(04-12-2016, 06:53 AM)epixoip Wrote: The document is not encrypted, just password protected, so there's nothing for oclHashcat to crack. You can either just remove the password and open the document, or XOR the password to un-obfuscate it.
This is a silly question, but how does one go about unobfuscating a XORed office document?
Posts: 1
Threads: 0
Joined: Apr 2018
(04-12-2016, 06:53 AM)epixoip Wrote: The document is not encrypted, just password protected, so there's nothing for oclHashcat to crack. You can either just remove the password and open the document, or XOR the password to un-obfuscate it.
Sorry, but how do you do this ? I searched everywhere on the internet and I wasn't able to find an answer.