WEBVTT

00:00:00.940 --> 00:00:03.250
[Autogenerated] it's time for the fifth demo.

00:00:03.640 --> 00:00:07.400
Let me show you how you can use Hash Cat to crack a

00:00:07.400 --> 00:00:10.270
password protected Docker X file.

00:00:13.140 --> 00:00:16.650
Here is my password protected Doc X file.

00:00:17.340 --> 00:00:20.220
As you can see, there is the message.

00:00:20.290 --> 00:00:23.270
Enter password to open file.

00:00:23.280 --> 00:00:25.470
Crack me dot Docker X.

00:00:26.140 --> 00:00:29.950
Let's crack this password and read this document.

00:00:30.940 --> 00:00:35.880
First, I will type hash cat Dash Dash Help in the console,

00:00:35.890 --> 00:00:38.960
and I will check the hash mode for Doc.

00:00:38.970 --> 00:00:39.970
X Files.

00:00:41.340 --> 00:00:47.670
Doc X file format was introduced in Microsoft Office 2013,

00:00:48.240 --> 00:00:55.260
and the hash mode for Microsoft Office 2014 is 9600.

00:00:56.240 --> 00:00:57.170
What's more,

00:00:57.540 --> 00:01:02.760
cache Cat uses this hash mode for cracking Doc X Files

00:01:03.140 --> 00:01:07.020
created in all Microsoft office versions,

00:01:07.030 --> 00:01:09.650
starting from 2014.

00:01:10.440 --> 00:01:15.450
So you don't have to worry about the version off Microsoft Office,

00:01:15.840 --> 00:01:23.550
and you can use just one hash mode 9600 for cracking old Doc X files.

00:01:24.540 --> 00:01:27.470
Okay, in the next step,

00:01:27.940 --> 00:01:31.620
I will extract the hash off the password from this

00:01:31.620 --> 00:01:34.360
password protected Doc X file.

00:01:35.040 --> 00:01:43.360
For this purpose, I will use the program office to John DOM P Y in module free.

00:01:43.360 --> 00:01:45.810
Off this course named Resource,

00:01:45.810 --> 00:01:52.170
is you can find more information about this program in the console.

00:01:52.540 --> 00:01:55.690
I will type office to John DOM P.

00:01:55.690 --> 00:01:56.260
Y.

00:01:56.840 --> 00:02:01.370
And next I will type crack me dot Docker X,

00:02:01.940 --> 00:02:08.259
which is the name off my dock X file and I will hit Enter.

00:02:09.639 --> 00:02:14.260
As you can see, the hash off the password has been extracted.

00:02:15.240 --> 00:02:19.480
Let me copy the hash off the password and let me use

00:02:19.480 --> 00:02:22.250
Hash cat to crack this password.

00:02:24.040 --> 00:02:25.750
I will type hash cat.

00:02:27.240 --> 00:02:28.100
Next.

00:02:28.320 --> 00:02:32.550
I will type dash M 9600.

00:02:33.240 --> 00:02:36.870
This is a hash mode for Doc X Files.

00:02:38.140 --> 00:02:42.160
After that, I will type dash A zero,

00:02:42.540 --> 00:02:46.050
which is used for a straight or standard attack.

00:02:46.440 --> 00:02:49.470
This is what I explained to you in the previous demos.

00:02:50.740 --> 00:02:53.950
Next, in between the apostrophes,

00:02:54.540 --> 00:03:00.960
I will paste the hash off the password that was extracted from this doc X file.

00:03:03.040 --> 00:03:08.950
I will provide a dictionary with passwords dictionary dot txt.

00:03:09.640 --> 00:03:12.760
And finally I will hit Enter.

00:03:16.240 --> 00:03:20.060
As you can see, hash cat cracked the password,

00:03:20.440 --> 00:03:23.560
and the password is Let's have fun.

00:03:25.040 --> 00:03:25.760
Next,

00:03:26.440 --> 00:03:33.270
I will go to my password protected Doc X file and I will enter this password.

00:03:36.840 --> 00:03:37.960
As you can see.

00:03:38.210 --> 00:03:41.850
Indeed, hash cut found the correct password.

00:03:42.240 --> 00:03:45.060
And now I can read this file.

00:03:46.040 --> 00:03:52.160
This is how you can use hash cat to crack a password protected Docker x file.

00:03:53.140 --> 00:03:55.920
Last but not least, in this demo,

00:03:55.930 --> 00:04:00.050
I presented a classical dictionary attack for cracking

00:04:00.050 --> 00:04:02.860
a password protected doc X file.

00:04:03.640 --> 00:04:08.890
But you can also use the attacks that I presented in the previous demos a

00:04:08.890 --> 00:04:13.470
dictionary attack with a rule or a dictionary attack with a mask.

00:04:13.940 --> 00:04:17.269
And this is what I would like you to keep in mind.