+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Misc (https://hashcat.net/forum/forum-15.html)
+--- Forum: General Talk (https://hashcat.net/forum/forum-33.html)
+--- Thread: office2hashcat.py strange output (/thread-5392.html)
office2hashcat.py strange output - obdnanr - 04-10-2016
I'm working with a 97-2003 office document and when I run the office2hashcat.py I get a something I'm not sure what to do with.
XOR obfuscation detected, Password Verifier : 18e787d1 (made up numbers, but it's the same length as the output)
Can anyone tell me what's going on here?
Thanks
RE: office2hashcat.py strange output - epixoip - 04-12-2016
The document is not encrypted, just password protected, so there's nothing for oclHashcat to crack. You can either just remove the password and open the document, or XOR the password to un-obfuscate it.
RE: office2hashcat.py strange output - fakeboyjake - 05-13-2017
(04-12-2016, 06:53 AM)epixoip Wrote: The document is not encrypted, just password protected, so there's nothing for oclHashcat to crack. You can either just remove the password and open the document, or XOR the password to un-obfuscate it.
This is a silly question, but how does one go about unobfuscating a XORed office document?
RE: office2hashcat.py strange output - DBAlex - 04-07-2018
(04-12-2016, 06:53 AM)epixoip Wrote: The document is not encrypted, just password protected, so there's nothing for oclHashcat to crack. You can either just remove the password and open the document, or XOR the password to un-obfuscate it.
Sorry, but how do you do this ? I searched everywhere on the internet and I wasn't able to find an answer.