Use Excel vulnerabilities to hack Excel protected worksheet passwords
This experiment is to exploit Excel to protect worksheet passwords by exploiting the vulnerability of Excel to compress files.
First we build a Excel table and then set Excel to protect the worksheet password and save as
650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M02/84/43/wKioL1eK396iQhxfAADs-oV4OIk326.png-wh_500x0-wm_3 -wmp_4-s_2813357506.png "style=" Float:none; "title=" 1.png "alt=" Wkiol1ek396iqhxfaads-ov4oik326.png-wh_50 "/>
650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M00/84/43/wKiom1eK396xBDP7AAC2Xpy4fLY198.png-wh_500x0-wm_3 -wmp_4-s_3071276731.png "style=" Float:none; "title=" 2.png "alt=" Wkiom1ek396xbdp7aac2xpy4fly198.png-wh_50 "/>
Make sure the password is in effect
650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M01/84/43/wKioL1eK39-CEGINAADtSCgLelM996.png-wh_500x0-wm_3 -wmp_4-s_2420251571.png "style=" Float:none; "title=" 3.png "alt=" Wkiol1ek39-ceginaadtscglelm996.png-wh_50 "/>
Renaming Excel file suffix . zip
650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M00/84/43/wKiom1eK39-Btx6BAADXt4eaiWs022.png-wh_500x0-wm_3 -wmp_4-s_114963676.png "style=" Float:none; "title=" 4.png "alt=" Wkiom1ek39-btx6baadxt4eaiws022.png-wh_50 "/>
650) this.width=650; "Src=" Http://s1.51cto.com/wyfs02/M01/84/43/wKiom1eK3-Cx-RhFAABPGwTIHyE314.png-wh_500x0-wm_3 -wmp_4-s_3078145829.png "style=" Float:none; "title=" 5.png "alt=" Wkiom1ek3-cx-rhfaabpgwtihye314.png-wh_50 "/>
The decompression has been changed. Excel File
650) this.width=650; "Src=" Http://s1.51cto.com/wyfs02/M02/84/43/wKioL1eK3-HxUmTvAACbJdR5MmM049.png-wh_500x0-wm_3 -wmp_4-s_1706845700.png "style=" Float:none; "title=" 6.png "alt=" Wkiol1ek3-hxumtvaacbjdr5mmm049.png-wh_50 "/>
it will appear when it is unpacked. 4 a file
650) this.width=650; "Src=" Http://s1.51cto.com/wyfs02/M00/84/43/wKioL1eK3-GjC4cSAAGxUtd1Yeo247.png-wh_500x0-wm_3 -wmp_4-s_1205124820.png "style=" Float:none; "title=" 7.png "alt=" Wkiol1ek3-gjc4csaagxutd1yeo247.png-wh_50 "/>
You will see the worksheet folder when you open the XL
650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M01/84/43/wKiom1eK3-LSpgEbAAFVAIJEoYE812.png-wh_500x0-wm_3 -wmp_4-s_3896700108.png "style=" Float:none; "title=" 8.png "alt=" Wkiom1ek3-lspgebaafvaijeoye812.png-wh_50 "/>
open it will open to Sheet1.xml is the first page of Excel that we set to protect the password
650) this.width=650; "Src=" Http://s1.51cto.com/wyfs02/M01/84/43/wKioL1eK4RGhfuFBAAE9uMPA6e8593.png-wh_500x0-wm_3 -wmp_4-s_1281631943.png "title=" qq picture 20160717093538.png "alt=" Wkiol1ek4rghfufbaae9umpa6e8593.png-wh_50 "/>
Use Adobe Dreamweavr to crack passwords
650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M02/84/43/wKiom1eK3-KzpTTLAAEkOOXAlPc276.png-wh_500x0-wm_3 -wmp_4-s_366515983.png "style=" Float:none; "title=" 9.png "alt=" Wkiom1ek3-kzpttlaaekooxalpc276.png-wh_50 "/>
Open Adobe Dreamweavr and Open Sheet1.xml file
650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M00/84/43/wKioL1eK3-KwDO26AAE6fTjufDs230.png-wh_500x0-wm_3 -wmp_4-s_1037843515.png "style=" Float:none; "title=" 10.png "alt=" Wkiol1ek3-kwdo26aae6ftjufds230.png-wh_50 "/>
Find <sheetprotection password= "C6ef" sheet= "1" objects= "1" scenarios= "1"/> then delete and save it so that Excel The protection code was cracked.
650) this.width=650; "Src=" Http://s5.51cto.com/wyfs02/M00/84/43/wKiom1eK3-Oz6VzrAADWrrg6mXc893.png-wh_500x0-wm_3 -wmp_4-s_603573511.png "style=" Float:none; "title=" 11.png "alt=" Wkiom1ek3-oz6vzraadwrrg6mxc893.png-wh_50 "/>
Compress the extracted files back in
650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M01/84/43/wKiom1eK3-SAa35SAAGoiPn_uTM017.png-wh_500x0-wm_3 -wmp_4-s_2390591612.png "style=" Float:none; "title=" 15.png "alt=" Wkiom1ek3-saa35saagoipn_utm017.png-wh_50 "/>
650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M02/84/43/wKioL1eK3-XwqLLgAAF20rRtsWA908.png-wh_500x0-wm_3 -wmp_4-s_1995874233.png "style=" Float:none; "title=" 16.png "alt=" Wkiol1ek3-xwqllgaaf20rrtswa908.png-wh_50 "/>
650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M01/84/43/wKiom1eK4auxFEwBAAFVPGyV6cw838.png-wh_500x0-wm_3 -wmp_4-s_2291241284.png "title=" qq picture 20160717093823.png "alt=" Wkiom1ek4auxfewbaafvpgyv6cw838.png-wh_50 "/>
650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M02/84/43/wKiom1eK3-byjLi_AAIH1SifRDE491.png-wh_500x0-wm_3 -wmp_4-s_144247998.png "style=" Float:none; "title=" 17.png "alt=" Wkiom1ek3-byjli_aaih1sifrde491.png-wh_50 "/>
Note the key points can only be used in the zip format to crack zip files
650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M02/84/43/wKioL1eK3-eCvOCKAAIb05zNi2o863.png-wh_500x0-wm_3 -wmp_4-s_2709489680.png "style=" Float:none; "title=" 18.png "alt=" Wkiol1ek3-ecvockaaib05zni2o863.png-wh_50 "/>
The experiment ends here.
This article from the "11823326" blog, reproduced please contact the author!
Use Excel vulnerabilities to hack Excel protected worksheet passwords