05-27-2019, 07:17 PM
Hi All
I am trying to extract the hash of a Excel2016 protected workbook its just the workbook that is protected not the whole file , this is just an experiment, I am aware of the zip file xml hack to remove the password but I want to try crack it .
I can extract this out of the file password is 123 .
workbookHashValue="KcknURoaCLxQ/KluZQvA+wLN2qgMGhJNclwqIEQy/ykvbMa+1Mzg/HjizqtFd4/Sb1f4jzNN3tWa0aw/nv09Q=="
workbookSaltValue="YIx5Emn5O3+V5fXq235zZA=="
workbookSpinCount="100000"
What I can gather from the file is it is a SHA512 with Salt and 100000 rolls.
Is there a way I can convert this to a hashcat format ?
It appears as if the Hash and Salt are encoded in some way, I tried base64 decode which does not work .
Any tips , if its some obvious encoding and I am being a noob please let me know and I will go read up on it , I am trying to learn
I am trying to extract the hash of a Excel2016 protected workbook its just the workbook that is protected not the whole file , this is just an experiment, I am aware of the zip file xml hack to remove the password but I want to try crack it .
I can extract this out of the file password is 123 .
workbookHashValue="KcknURoaCLxQ/KluZQvA+wLN2qgMGhJNclwqIEQy/ykvbMa+1Mzg/HjizqtFd4/Sb1f4jzNN3tWa0aw/nv09Q=="
workbookSaltValue="YIx5Emn5O3+V5fXq235zZA=="
workbookSpinCount="100000"
What I can gather from the file is it is a SHA512 with Salt and 100000 rolls.
Is there a way I can convert this to a hashcat format ?
It appears as if the Hash and Salt are encoded in some way, I tried base64 decode which does not work .
Any tips , if its some obvious encoding and I am being a noob please let me know and I will go read up on it , I am trying to learn