XLM Macros & Unhiding Excel Worksheets - HackTheBox Biz CTF "OldSchool"

If you would like to support the channel and I, check out Kite! Kite is a coding assistant that helps you code faster, on any IDE offer smart completions and documentation. www.kite.com/get-kite/?... (disclaimer, affiliate link)
For more content, subscribe on Twitch! / johnhammond010
If you would like to support me, please like, comment & subscribe, and check me out on Patreon: / johnhammond010
PayPal: paypal.me/johnhammond010
E-mail: [e-mail]
Discord: johnhammond.org/discord
Twitter: / _johnhammond
GitHub: github.com/JohnHammond

[@Grommish]

Please don't cut the videos short because you think no one wants to see you "bump around".. That is the _best_ part. What other time will I get to watch a professional at their task like this? The foibles shows reality, because I watched the video during a break from smacking my head against the desk on a python issue. It's part of the 'fun' I'm told, and it is, when it's happening to someone else :D Thank you again for all the time and effort you put into these.

[@Cavemannnnnn]

Yesss

[@Nature08405]

+1 like

[@na-sx7ji]

you are aware that he already solved this before recording, right? What you are asking is really for him to "act" like he doesn't know what's going on, when in reality he has already solved the puzzle and is showing us his steps and thought process.

[@PalCan]

Absolutely.. even if it takes a long time ... im here

[@jonleath651]

Literally watched this video yesterday (never knew about XML macros), and then this morning received an email with one of these excel files attached (I manage a print shop and we get excel files all the time). Thanks for the perfectly timed heads up and informative content!

[@ivanboiko8975]

Awesome! Thank you for amazing malware-related content.

[@xsv-]

Fun little challenge, nice work :D

[@olcaytometinkorcan5981]

Thanks John!!!

[@claudiafischering901]

Oh thanks. Now I can read my malicious excel file - what send to me from a student. Now I can it analyse it. This video helps a lot. Cool. @John Hammond great video again, see ya in the next video.

[@user-ec8mo1jn4m]

Same I wanna do to my teacher, lol.

[@zulnoth]

i don't even code and i love your videos.

[@daljeetbhati8816]

Hope if i can meet you love you brother for all of this effort

[@dedkeny]

*Stares into a magnified lens to a photosensitive silicon plate looking for human response* "Do you mind if i just play..."

[@logiciananimal]

As for how to get the stuff out, save as CSV and open in an other sort of editor, not the LibreOffice thing?

[@logiciananimal]

Excel 4 was released in 1992. Yeesh. And I thought colleagues still insisting that they have to use VB6 were scary.

[@mighty1243]

❤️

[@zoes17]

=GOTO(P290)... =GOTO(P294) reminds me of a NOP slide from a ROP gadget.

[@kimfucku8074]

Was there any macro code in the workbook? Can I download this file somewhere? Edit: ok, found the file. Interesting stuff!

[@bhagyalakshmi1053]

Nice amazing macro

[@ivanboiko8975]

Do anyone have a sample for play around? or hash at least

[@JetblackSYN]

Is it possible to unzip the .xls file to see the hidden sheet? I know that's a trick you can do on windows to see more contents or unset passwords for protected sheets.

[@DoorThief]

I used to convert password protected xls to Google Sheets to remove it

[@kimfucku8074]

XLS is a binary file and not based on XML. You can save XLS as XLSX, which gives you then the possiblity to unzip it. You can unprotect an XLS file using a Hex editor.

[@EnjoyGames_]

dude, now i can see your face at 4K!

[@bhagyalakshmi1053]

You have the looking for you micro windows open