MS Office Files Password Cracking Using JTR

Today we are going learn how to crack the password of MS Office file using JTR(John The Ripper) tool. 

Disclaimer: The articles provided on HackWithV is purely for informational and educational purpose only, and for those who are willing and curious to know & learn about Ethical Hacking, Security and Penetration Testing. Anytime the word "Hacking" that is used on this site shall be regarded as Ethical Hacking.

What is MS Office File?

• Microsoft Office is a set of computer applications mainly used for business or office purposes.
• It has different types of format like doc, docx, ppt, pptx, xls, xlsx etc.
  

What is JTR?

• John, better known as John the Ripper, is a tool to find weak passwords of users in a server.
• John supports different cracking modes and understands many ciphertext formats, like several DES variants, MD5 and blowfish. 
• It can also be used to extract AFS and Windows NT passwords.
  

Practical:

• Attacker: Kali Linux(OS), John(Tool), Wordlist.
  

• Target: Doc(file)

ls

• Here we have document(hashextractor), sample.docx(target Doc file), rockyou.txt(wordlist). Now lets extract the hashes of Doc file.

./office2john sample.docx

• The office2john has extracted the hashes of the Doc. Copy the hash in a file.

cat hash.txt

• Here the hash is saved in a file. Now check usage of john.
  

john --help

• Now, its time for crack the password using john, hash.txt file and rockyou.txt file.
• The rockyou.txt file contains 14344394 password.
• The john cracked the password within 2 min 10 sec.
  

wc -l rockyou.txt

john hash.txt --wordlist=rockyou.txt

• Here we got the password of Doc, now try open the doc with this password.

Be Aware, Be Secure.

Thank You 🙏