+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: Excel 2016 Workbook Hash (/thread-8381.html)
Excel 2016 Workbook Hash - kommisar - 05-27-2019
Hi All
I am trying to extract the hash of a Excel2016 protected workbook its just the workbook that is protected not the whole file , this is just an experiment, I am aware of the zip file xml hack to remove the password but I want to try crack it .
I can extract this out of the file password is 123 .
workbookHashValue="KcknURoaCLxQ/KluZQvA+wLN2qgMGhJNclwqIEQy/ykvbMa+1Mzg/HjizqtFd4/Sb1f4jzNN3tWa0aw/nv09Q=="
workbookSaltValue="YIx5Emn5O3+V5fXq235zZA=="
workbookSpinCount="100000"
What I can gather from the file is it is a SHA512 with Salt and 100000 rolls.
Is there a way I can convert this to a hashcat format ?
It appears as if the Hash and Salt are encoded in some way, I tried base64 decode which does not work .
Any tips , if its some obvious encoding and I am being a noob please let me know and I will go read up on it , I am trying to learn
RE: Excel 2016 Workbook Hash - undeath - 05-27-2019
hashcat can only crack passwords of encrypted office documents, not protected ones.
RE: Excel 2016 Workbook Hash - kommisar - 05-27-2019
(05-27-2019, 07:23 PM)undeath Wrote: hashcat can only crack passwords of encrypted office documents, not protected ones.Is there no way I can format the string into a hashcat format ?
Like the sha512($pass.$salt) type format , or is it the string encoding preventing me from doing that ?