Decrypting Office files - password removal

Not for 'how-to' coding questions but PHP theory instead, this forum is here for those of us who wish to learn about design aspects of programming with PHP.

Moderator: General Moderators

Locked
dillion
Forum Commoner
Posts: 56
Joined: Thu Feb 15, 2007 8:32 am

Decrypting Office files - password removal

Post by dillion »

I wrote a Christmas shopping list earlier this year and put in password-protection on it (open) - when the time came for me to start shopping... I cannot remember the password! :banghead:

So far with a few freeware applications, I am not able to recover the password and the only thing that actually worked is the decryption service (e.g. password removal) like http://www.officepasswordremover.com/

This made me think... how do they do it? I would love to write a PHP function to do this but no idea how they managed to decrypt a password-protected file in a matter of seconds and so easily!

For the moment, I am not too keen on spending £25 to allow me to open a word document. :wink:
dillion
Forum Commoner
Posts: 56
Joined: Thu Feb 15, 2007 8:32 am

Re: Decrypting Office files - password removal

Post by dillion »

Ok... further research has yield that Word password protection is based on RC4 encryption so this means that an encryption key must be somewhere inside the Word document file.

What are your thoughts?

EDIT: I have found another password removal service - http://www.decryptum.com - pretty impressive but still pretty expensive!
User avatar
BlaineSch
Forum Commoner
Posts: 28
Joined: Sun Jun 07, 2009 4:28 pm
Location: Trapped in my own little world.

Re: Decrypting Office files - password removal

Post by BlaineSch »

Since it is your password it might be possible to try and bruteforce it using the letters from your common passwords?
dillion
Forum Commoner
Posts: 56
Joined: Thu Feb 15, 2007 8:32 am

Re: Decrypting Office files - password removal

Post by dillion »

BlaineSch wrote:Since it is your password it might be possible to try and bruteforce it using the letters from your common passwords?
The file is being bruteforced at the moment and has been since last night (my poor computer!) - whether it will work or not, I don't know. The software I am using are:
- GuaWord (command-line)
- MS Word Excel Cracker
- Office Key

As a side project, I thought it would be interesting to write a function to decrypt a doc file - so far I am not able to find where the encryption key is stored or what it looks like!
dillion
Forum Commoner
Posts: 56
Joined: Thu Feb 15, 2007 8:32 am

Re: Decrypting Office files - password removal

Post by dillion »

*bump* any ideas?
User avatar
daedalus__
DevNet Resident
Posts: 1925
Joined: Thu Feb 09, 2006 4:52 pm

Re: Decrypting Office files - password removal

Post by daedalus__ »

User avatar
daedalus__
DevNet Resident
Posts: 1925
Joined: Thu Feb 09, 2006 4:52 pm

Re: Decrypting Office files - password removal

Post by daedalus__ »

dillion
Forum Commoner
Posts: 56
Joined: Thu Feb 15, 2007 8:32 am

Re: Decrypting Office files - password removal

Post by dillion »

thanks for your replies - unfortunately, the 1st link is only applicable for Modify password and not Open password.

The 2nd one looks interesting and shall look further although I am not familar with .NET. :)

I did find this one earlier - http://msdn.microsoft.com/en-us/library/dd945851.aspx - so far, I can't see anything in the text unless I am missing something. :crazy:
josh
DevNet Master
Posts: 4872
Joined: Wed Feb 11, 2004 3:23 pm
Location: Palm beach, Florida

Re: Decrypting Office files - password removal

Post by josh »

Could this be related? http://user.services.openoffice.org/en/ ... 56&start=0
Probably not
steeveherris
Forum Newbie
Posts: 3
Joined: Wed Jun 16, 2010 4:28 am

Re: Decrypting Office files - password removal

Post by steeveherris »

Yes it can be done if some expert in decrypting can do the password hacking and decrypt the office files. So always be aware of such masters. They can trouble you and your data.
User avatar
Benjamin
Site Administrator
Posts: 6935
Joined: Sun May 19, 2002 10:24 pm

Re: Decrypting Office files - password removal

Post by Benjamin »

:arrow: Locked. Sorry, this is too shady.
Locked