Korean Document

[zl9801]

Does the Korean document hangul, *.hwp crack, is there any plan?

[philsmd]

What is the algorithm here ?

I've never heard of this file format / file type and hashing/encryption algorithm ? Is this some popular software ?

How does the algorithm detail look like ? are the publicly available ? and tools that can crack those files ?

Do you think a lot of hashcat users would benefit from adding this new hash type ? Maybe in other languages/countries it is more popular, I won't underestimate that chance...

Please give much more details here like example hashes / files with password and encryption / hashing algorithm details, otherwise we probably won't be able to implement this (without any specs etc).

[philsmd]

any updates here ? more details needed.

otherwise we might need to close this issue as INVALID.
Thx

[zl9801]

I found this type in Elcomesoft and hope to help you.

[philsmd]

but do you know how to extract the hashes and how to verify that the password is correct ? we need the algorithm details and some examples, otherwise this is impossible to implement without any details.

[zl9801]

Sorry, I checked some documents about hwp, and encryption of hwp documents is not very clear. Hope this can help you!
https://github.com/junorouse/hwp-password-recover

[trounce1]

@zl9801 looks fairy easy to implement. I can do it for you. are you able to provide me with a sample file and a known password?

[zl9801]

@trounce1 I will be very happy that this algorithm can be integrated into hashcat!
https://mega.nz/folder/Ts9DCQyD#e-nctQSILJ0XDPWDoRcLrQ
The file name is the hwp password

[zl9801]

Can GPU computing be used?

[trounce1]

Yes

…

On 15 Oct 2020, at 05:01, zl9801 ***@***.***> wrote:  Can GPU computing be used? — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or unsubscribe.

[zl9801]

very well

[trounce1]

i will have a look at this in the next week or so

[trounce1]

@zl9801 it turns out that the online tool https://github.com/junorouse/hwp-password-recover does not work to crack your passwords. can i confirm the passoword is "123456" for 123456.hwp/

[trounce1]

and what is the application you are using to generate the files?

[zl9801]

http://www.hancom.com
Korea office

[zl9801]

http://hangul2012.blogspot.com/

[zl9801]

https://github.com/mete0r/pyhwp/blob/82aa03eb3afe450eeb73714f2222765753ceaa6c/pyhwp-tests/hwp5_tests/test_distdoc.py

mete0r/pyhwp#154

mete0r/pyhwp@622d941

[jsteube]

@trounce1 Any update here?