Re: Microsoft Word Protection Bypass

[Johan De Meersman <jdm () operamail com>]

Actually, just remove the entire tag in step 3, and open the xml file in
word again - You don't even lose formatting as far as I see :-)

Christian King wrote:

> Quick HOWTO:
>
> 1.  Open the protected document in Word
> 2.  File / Save As (XML Document)
> 3.  Open XML Document, look for <w:documentProtection w:edit="read-only"
> w:enforcement="on" w:unprotectPassword="xxxxxxx"/>  The
> "unprotectPassword" will be a hex byte string.
> 4.  Open the .doc in your favorite hex editor, and search for the hex
> string in the reverse order, i.e. if the unprotectPassword says "1F C6
> CB EB" you would be searching for "EB CB C6 1F" .. when you find this
> string simply zero them out and save the document (I suggest saving as a
> copy obviously).   Once you open the document again you should be able
> to just click "Tools / Unprotect Document" and it will not even prompt
> for a password.
>
> -Chris
>
> -----Original Message-----
> From: Dave.Collins () tetratech com [mailto:Dave.Collins () tetratech com] 
> Sent: Wednesday, July 06, 2005 4:11 PM
> To: bugtraq () securityfocus com
> Subject: Re: Microsoft Word Protection Bypass
>
> Where can I find the "how to" to get around the password protection?  I
> have a form that I need to modify, but whoever created it is no longer
> with the company and as a result, the password is "gone"
>
> Many Thanks
>
>
>  


-- 
When you're in command, command.
                -- Admiral Nimitz
-- 

Public GPG key at blackhole.pca.dfn.de

GCS/IT d- s:+ a- C(+++)$ UL++++$ P+++(++++)$ L++(+++)$ !E- W+(+++)$
N+(++) o K w$ !O !M V PS(++)@ PE-(++)@ Y+ PGP++(+++) t(+) 5 X R tv--
b++(++++) DI++(++++) D++ G e++>+++++ h(+) r y+**

Attachment: signature.asc
Description: OpenPGP digital signature