Solved "Encrypted-Split-No-Strings-DB" - Security Challenge Solved

[FrankRuperto]

Philipp Stiefel video on Access (In)Security. Watch at the 22 minute mark: https://www.youtube.com/watch?v=KEuRn5coUZM

e.g. reading out information via getobject from the running frontend-Instance.

 

[Uncle Gizmo]

Excellent video, thank you Frank!

 

[arnelgp]

the "tool" is easy to download!
it's everywhere in the Torrent world!
just tested it on a VBA-password protected accdb.
it did not really decipher the "real" password.
it did "cracked" it and placed the "cracked" vba-password.
so i can now open it with the "cracked" password.

 

[FrankRuperto]

the "tool" is easy to download!
it's everywhere in the Torrent world!
just tested it on a VBA-password protected accdb.
it did not really decipher the "real" password.
it did "cracked" it and placed the "cracked" vba-password.
so i can now open it with the "cracked" password.

Are you referring to the Forensics tool, or Wayne's tool?
You mention cracking accdb password, but what about cracking a password encrypted accde, such as @isladogs demo challenge?
Most of the password cracking tools rely on brute-force and if a long enough password is used then brute force would take forever.

 

[arnelgp]

i used the passware only on accdb.

 

[isladogs]

@arnelgp is referring to replacing the VBA project password which can be done without any external software.

That approach cannot be used to remove or replace the whole file encryption password.

 

[FrankRuperto]

@arnelgp is referring to replacing the VBA project password which can be done without any external software.

As in using a hex editor on an accdb to replace the single letter that disables password protection?

 

[FrankRuperto]

https://www.linkedin.com/posts/tomu...ss-database-activity-6784661139092574208-VYjq

 

[isladogs]

So?