Other answers explain how to remove the password in the special case of a docx file. IMHO, it is not enough to answer the underlying question: what does that document contains, because even after the password has been removed, you still have to open the document to read it. Show Anyway, malicious Word document can be understood in at least 2 ways:
First acception will lead to a rather simple way: just configure word to not process any macro and then open the file. In second acception, it will really depend on the actual format, but the general guidance is: open it with something that does not rely on Word code. For example, LibreOffice or Oracle OpenOffice are known to be able to process Microsoft Word formats. As they do not share the same code base, it is unlikely that an exploit targetted at Microsoft Word could affect them - in particular, they are a good alternative for ignoring any macro. You can also use libraries able to process Word documents, but you should first wonder whether they fully implement the specification from scratch or whether they rely on a COM or .NET interface to a Microsoft engine. Do not even try to use them in the latter case! Accessing the content of password-protected and encrypted documents saved as DOC/XLS files (as opposed to the newer DOCX/XLSX files) is often possible without time-consuming attacks regardless of the length of the password. Advanced Office
Password Recovery enables experts quickly breaking the encryption of password-protected DOC and XLS files, which are Microsoft Word and Excel documents saved by modern versions of the app in the “compatibility” format. Organizations are still using the “compatible” Office 97/2000 formats for their document workflow. Advanced Office Password Recovery can quickly remove protection and decrypt documents saved in the following
formats: Why does it work that way, what is the difference in encryption between the “compatible” and modern formats, and how exactly can
you remove protection from DOC and XLS files? Read along to find out. For compatibility reasons, Microsoft Office apps are still using legacy encryption when a document is saved as a .DOC instead of a .DOCX. You can read more about it in our previous article Microsoft
Office 40-bit Encryption and Thunder Tables in Advanced Office Password Recovery. Microsoft Office 97 was once released with deliberately weak encryption due to US export restrictions. That encryption scheme was carried over to Microsoft Office 2000 unchanged, even though by the time the export restrictions ceased to exist. The native US versions of Microsoft Office could be configured to use stronger encryption, yet the setting was rarely enabled because of valid compatibility
concerns – the same concerns that are driving many organizations today to keep using the “compatible” DOC/XLS formats for their document workflow. Technically speaking, the “compatible” formats are using the RC4 cipher for encryption and MD5 for hashing. A weak 40-bit encryption key and a single iteration of MD5 hashing are used to protect information. Even twenty years ago, 40-bit encryption was considered weak enough to be cracked in reasonable time. Today, several hours of brute forcing is all that is needed to break 40-bit encryption on an average consumer-grade CPU; much less if you use a video card. The newer DOCX/XLSX files are with a much stronger AES encryption. 256-bit encryption keys require attacking the original plain-text passwords in order to decrypt the content, while the large number of iterations (hash rounds) makes such attacks deliberately slow. In other words, while the older formats have known vulnerabilities allowing for near-instant recovery of encrypted content, the newer DOCX/XLSX files must be attacked with Elcomsoft Distributed Password Recovery to recover the original password. The original password is then used to decrypt the content of the DOCX/XLSX file. In other words, Advanced Office Password Recovery today can decrypt a password-protected Word .doc documents or an Excel .xls spreadsheet saved as “compatible” within a guaranteed, limited timeframe. The exact time needed for the attack will depend on your CPU power and will NOT depend on the length and complexity of the user’s password. Please not: the hashes are salted. This means that the different documents protected with the same password are encrypted with different encryption keys. Because of this, you must run individual attacks on these documents – even if they share the same password. However, brute forcing is not even needed to break 40-bit encryption if you use Thunder Tables, a feature available in the Forensic edition of Advanced Office Password Recovery. Thunder TablesIn the past, enumerating the entire set of 40-bit encryption keys would take several days on an average computer. To cut this time, we fully refactored all possible 40-bit keys to build Elcomsoft Thunder Tables ™, an extension of the Rainbow Tables attack. Using Thunder Tables, you can break all compatible Word documents and about 97% of compatible Excel spreadsheets in just seconds instead of hours. The Thunder Tables are available in the Forensic edition of Advanced Office Password Recovery. You can read more about the Thunder Tables in Thunder Tables™ Explained | ElcomSoft blog. In the past, users would have to obtain Thunder Tables separately by either copying them from the supplied DVD or flash drive or manually downloading them from our Web site. This is no longer the case: Thunder Tables will be downloaded automatically when you need them. Advanced Office Password Recovery automatically detects the document format and the type of protection and suggests downloading Thunder Tables if the document uses 40-bit encryption. Thunder Tables are exclusive to the Forensic edition; Home edition users still have an option to brute-force all available 40-bit keys, which is plenty fast on modern CPUs. Thunder Tables take a lot of space on your computer; they occupy several gigabytes of disk space. By default, the tables will be stored in %APPDATA%\Elcomsoft Password Recovery\Thunder Tables. If your system drive does not have the amount of free space required, or if you don’t want to store something as large as Thunder Tables on your boot drive, consider specifying a different path. You can do that by editing the following Registry key: Computer\HKEY_CURRENT_USER\SOFTWARE\Elcomsoft\Advanced Office Password Recovery\TTPath Please note that Thunder tables should be stored on an SSD drive or USB flash drive due to the large amount of random access operations. It is important to note that the actual password is not needed to decrypt documents as the tool attacks the binary encryption key instead. If, for any reason, you absolutely must recover the password, you can run a GPU-assisted attack that offers speeds in the order of tens of millions password combinations per second. Breaking 40-bit encryption step by stepTo break a document protected with 40-bit encryption, do the following.
REFERENCES: Advanced Office Password RecoveryGPU-accelerated Advanced Office Password Recovery can use powerful processing units of your AMD and NVIDIA video cards to remove, replace or recover passwords protecting Microsoft Office documents faster. Supporting all versions of Microsoft Office from version 2.0 to 2019, the tool allows specifying a variety of masks and attacks. Its highly-optimized low-level code ensures the quickest recovery of the most complex passwords. Advanced Office Password Recovery official web page & downloads » How do I remove an encrypted password from a Word document?Remove a password from a document. Open the document and enter its password.. Go to File > Info > Protect Document > Encrypt with Password.. Clear the password in the Password box, and then click OK.. How do you unlock a Word document without the password?Press Alt+F11 again to close the VBA editor, click on the protected text to open the Restrict Editing menu. Click Stop Protection. It will stop protection without the password.
Can you decrypt a Word document?Normally, when a Word document is encrypted with password, we can open it with the protected password, and then decrypt it by this way: File > Info > Protect Document > Encrypt with password, clear the password from text box, and then click on OK to unprotect the Word document.
|
How to decrypt word document password
Pos Terkait
Copyright © 2024 menakung Inc.
