Date: Thu, 30 Jan 2014 16:38:57 -0500 From: Matt Weir <cweir@...edu> To: "john-users@...ts.openwall.com" <john-users@...ts.openwall.com> Subject: Re: Decrypting PPT files So another question I have regarding this: Can the $oldoffice$3* hash format create false positives? Basically I "cracked" the hash but when I use it to open up the powerpoint file in question, powerpoint just hangs. Please note when I enter in the wrong password, Powerpoint will instead say that the password is invalid. Side note, the office2john.py in the unstable_jumbo branch appears to have the bug I encountered earlier but the version in bleeding_jumbo does not. And Dhiru, thanks for offering, but I can't share the powerpoint file in question. Thanks, Matt On Sat, Jan 25, 2014 at 5:48 PM, Matt Weir <cweir@...edu> wrote: > Thanks Dhiru! It turns out the older version of office2john.py was the > issue. I used the one from magnum's branch and it worked like a charm. I > hope that version is going to be available in the next jumbo patch since it > really is a useful script. Oh and Rich, sorry about misattributing the > office test files to Magnum. > > Matt > > -----Original Message----- > From: Dhiru Kholia [mailto:dhiru.kholia@...il.com] > Sent: Friday, January 24, 2014 10:51 PM > To: john-users@...ts.openwall.com > Subject: Re: [john-users] Decrypting PPT files > > On 01/24/14 at 05:51pm, Matt Weir wrote: > > I'm trying to decrypt a password protected a powerpoint 97-2003 PPT > > file. I've successfully used office2john.py on Word documents, but > > this is the first .ppt file I've tried and it errors out with: > > > > 'ascii' codex can't decode byte 0xd9 in position 2: ordinal not in > > range(128) > > Hi Matt, > > Are you using the latest "bleeding-jumbo" version of the office2john.py > utility? > > https://github.com/magnumripper/JohnTheRipper/tree/bleeding-jumbo/ > > I just tried office2john.py on the .ppt and .pptx files I have and it seems > to working just fine (TM). > > It would be awesome if you could share a sample .ppt file which is failing > (private email is OK). > > -- > Dhiru > >
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.