Identify password p...
 
Notifications
Clear all

Identify password protected files

3 Posts
3 Users
0 Reactions
997 Views
iruiper
(@iruiper)
Estimable Member
Joined: 19 years ago
Posts: 145
Topic starter  

Hello everybody,

I need to export all the Office password protected documents from a drive . Does anyone know if there is any pattern to find inside these Office files to know if they are protected or not? Thanks!


   
Quote
keydet89
(@keydet89)
Famed Member
Joined: 21 years ago
Posts: 3568
 

http//63.230.221.50/ports/textproc/wv/work/wv-0.7.1/notes/convert-to-struct/demo.txt

Another option is to create a document, and then copy it…open the copy and add a password. Do a byte-by-byte diff of the file…


   
ReplyQuote
cfprof
(@cfprof)
Trusted Member
Joined: 20 years ago
Posts: 80
 

FTK identifies these with an entropy calculation. I think X-Ways (and WinHex) do the same.

You can filter them out and then export them so you can put them into your favorite password cracking software.


   
ReplyQuote
Share: