hashcat Forum
Write protected Word-File - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Deprecated; Previous versions (https://hashcat.net/forum/forum-29.html)
+--- Forum: Old oclHashcat Support (https://hashcat.net/forum/forum-38.html)
+--- Thread: Write protected Word-File (/thread-4515.html)



Write protected Word-File - superaggy - 07-09-2015

Hello,

I've got a write-protected Word-File. I know how to remove the protection, but is it possible to find out the password? All the howto's are for read-protected files and the office2john.py doesn`t find a hash.

When I convert the document to an xml-file I got the following:

<w:documentProtection w:edit="forms" w:enforcement="1" w:cryptProviderType="rsaAES" w:cryptAlgorithmClass="hash" w:cryptAlgorithmType="typeAny" w:cryptAlgorithmSid="14" w:cryptSpinCount="100000" w:hash="herecomesthehash" wConfusedalt="herecomesthesalt"/>

So is there a way to get the password from the has an the salt? In the hash-type-list there is no rsaAES.


RE: Write protected Word-File - Rolf - 07-09-2015

Time for hashcat to implement world's fastest GNFS to crack RSA!(not that it would help against current secure implementations, like RSA-2048 and RSA-4096, but it'll be a lot of fun).
Let's wait for an expert to chime in.