Identify password p...
 
Notifications
Clear all

Identify password protected files

3 Posts
3 Users
0 Reactions
1,192 Views
iruiper
(@iruiper)
Estimable Member
Joined: 20 years ago
Posts: 145
Topic starter   [#1385]

Hello everybody,

I need to export all the Office password protected documents from a drive . Does anyone know if there is any pattern to find inside these Office files to know if they are protected or not? Thanks!



   
Quote
keydet89
(@keydet89)
Famed Member
Joined: 22 years ago
Posts: 3568
 

http//63.230.221.50/ports/textproc/wv/work/wv-0.7.1/notes/convert-to-struct/demo.txt

Another option is to create a document, and then copy it…open the copy and add a password. Do a byte-by-byte diff of the file…



   
ReplyQuote
cfprof
(@cfprof)
Trusted Member
Joined: 21 years ago
Posts: 80
 

FTK identifies these with an entropy calculation. I think X-Ways (and WinHex) do the same.

You can filter them out and then export them so you can put them into your favorite password cracking software.



   
ReplyQuote
Share: