12-21-2021, 03:09 AM
(This post was last modified: 12-21-2021, 03:15 AM by andy_larkin.)
(12-21-2021, 02:24 AM)meow Wrote: So you have an Excel 2007 file that's password protected and you don't know the password?
What is the source of this hex encoded password? What encoding was used when it came into existence? It's unlikely that Excel's password encoding is unknown to Excel, it's more likely that it's unknown to you and the program you're using to crack it.
Are you saying that "ê" is not one of the characters of the password? How can you know this if you don't know the password? You have to know something about the original password to be able to rule that out.
Are you 100% sure that this hex encoded password can unlock the file if it was written out in plain text (not hex encoded)?
Assuming that the original password was "qwerty", you can't unlock the file with its hex equivalent "717765727479" in extended ASCII. The password "qwerty" is "717765727479" regardless if you used ASCII or extended ASCII. Excel is expecting you to type in "qwerty", not "717765727479" or some other form of gibberish.
There is no magic, only a lot of hard work.
I think you're approaching the problem the wrong way. I haven't looked at this myself (yet) but here is some useful and commonly referenced bit of information:
https://hashcat.net/wiki/doku.php?id=fre..._documents
You may also find it interesting to read this:
https://en.wikipedia.org/wiki/Microsoft_...protection
Hey, I've already know the password, got it using hashcat 9400(first used office2hashcat to get hash of xslx file). Brute force was successful. But I have result like that: $office$*2007$*20*128*16*e284...$HEX[hex encoded password here].
Now I want to open this excel file using password from hashcat. But when I'm converting trough online hex to text converting tools one of the symbols looks like: ê or even �. Also I've created simple python script to convert hex string into text using python supported encodings.I think some not standard encoding was used while protecting excel file with password. Any converted from hex text password I've tried to open excel file with not working
![Sad Sad](https://hashcat.net/forum/images/smilies/sad.gif)
Maybe you can advice me something to open that file? Hope now you understand clear my case, sorry for my bad english.
I have bad understanding of how encodings/decodings from hex is working, but someway hashcat decoded the hash of file using one of passwords, so I think there should be way to open excel file data for me using that hex password or brute force encoding algorithm in worst case.