3

I know how to remove the password protection from an excel document, but I was wondering if there was a method to recover the original password. I have a document encrypted with a 64 character password and I've been searching for ways to recover it but have found none.

  • Feel free to ask for more info if your question isnt answered. Otherwise, consider accepting an answer as this helps future researchers :) – Matthew Peters Nov 6 '15 at 12:39
3

I would recreate the content found here but there really is no need because it is formatted so nicely. Basically, because the password is stored with the document, you can find the password hash pretty easily in a hex editor. From there, you can simply brute force it.

  • I don't think the brute forcing will work as it was a randomly generated 64 character password so I doubt it would be discovered. – dcvl Sep 30 '15 at 17:35
  • 1
    Brute forcing will work. It's all just a matter of how much effort and of course what encryption algo was used. I'm not particularlly familiar with which algo it is using. For instance, if you toss a 64 character password on a WEP network, that is still easy to break... – Matthew Peters Sep 30 '15 at 18:08
  • The link changed to this: guidancesoftware.com/blog/digital-forensics/2015/07/01/… – Fernando Santucci Sep 12 '18 at 15:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.