Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <CAJ9ii1GcyDJifBzO9zJ4pQERqdB_33+pvVtqJJZFYj1C_ai3wA@mail.gmail.com>
Date: Thu, 30 Jan 2014 16:38:57 -0500
From: Matt Weir <cweir@...edu>
To: "john-users@...ts.openwall.com" <john-users@...ts.openwall.com>
Subject: Re: Decrypting PPT files

So another question I have regarding this: Can the $oldoffice$3* hash
format create false positives? Basically I "cracked" the hash but when I
use it to open up the powerpoint file in question, powerpoint just hangs.
Please note when I enter in the wrong password, Powerpoint will instead say
that the password is invalid.

Side note, the office2john.py in the unstable_jumbo branch appears to have
the bug I encountered earlier but the version in bleeding_jumbo does not.

And Dhiru, thanks for offering, but I can't share the powerpoint file in
question.

Thanks,
Matt




On Sat, Jan 25, 2014 at 5:48 PM, Matt Weir <cweir@...edu> wrote:

> Thanks Dhiru! It turns out the older version of office2john.py was the
> issue. I used the one from magnum's branch and it worked like a charm. I
> hope that version is going to be available in the next jumbo patch since it
> really is a useful script. Oh and Rich, sorry about misattributing the
> office test files to Magnum.
>
> Matt
>
> -----Original Message-----
> From: Dhiru Kholia [mailto:dhiru.kholia@...il.com]
> Sent: Friday, January 24, 2014 10:51 PM
> To: john-users@...ts.openwall.com
> Subject: Re: [john-users] Decrypting PPT files
>
> On 01/24/14 at 05:51pm, Matt Weir wrote:
> > I'm trying to decrypt a password protected a powerpoint 97-2003 PPT
> > file. I've successfully used office2john.py on Word documents, but
> > this is the first .ppt file I've tried and it errors out with:
> >
> > 'ascii' codex can't decode byte 0xd9 in position 2: ordinal not in
> > range(128)
>
> Hi Matt,
>
> Are you using the latest "bleeding-jumbo" version of the office2john.py
> utility?
>
> https://github.com/magnumripper/JohnTheRipper/tree/bleeding-jumbo/
>
> I just tried office2john.py on the .ppt and .pptx files I have and it seems
> to working just fine (TM).
>
> It would be awesome if you could share a sample .ppt file which is failing
> (private email is OK).
>
> --
> Dhiru
>
>

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.