Excel 2016 Workbook Hash
#1
Hi All
I am trying to extract the hash of a Excel2016 protected workbook its just the workbook that is protected not the whole file , this is just an experiment, I am aware of the zip file xml hack to remove the password but I want to try crack it .

I can extract this out of the file password is 123 .

workbookHashValue="KcknURoaCLxQ/KluZQvA+wLN2qgMGhJNclwqIEQy/ykvbMa+1Mzg/HjizqtFd4/Sb1f4jzNN3tWa0aw/nv09Q=="
workbookSaltValue="YIx5Emn5O3+V5fXq235zZA=="
workbookSpinCount="100000"

What I can gather from the file is it is a SHA512 with Salt and 100000 rolls.
Is there a way I can convert this to a hashcat format ?
It appears as if the Hash and Salt are encoded in some way, I tried base64 decode which does not work .
Any tips , if its some obvious encoding and I am being a noob please let me know and I will go read up on it , I am trying to learn Smile
Reply
#2
hashcat can only crack passwords of encrypted office documents, not protected ones.
Reply
#3
(05-27-2019, 07:23 PM)undeath Wrote: hashcat can only crack passwords of encrypted office documents, not protected ones.
Is there no way I can format the string into a hashcat format ? 
Like the sha512($pass.$salt) type format , or is it the string encoding preventing me from doing that ?
Reply