# msoffcrypto-tool
> Decrypt password-protected Microsoft Office documents (OLE and OOXML)

**Category:** [[categories/analyze-documents-microsoft-office|Analyze Documents > Microsoft Office]] | **Tier:** Rich (FOR610)
**Docs:** [https://docs.remnux.org/discover-the-tools/analyze+documents/microsoft+office](https://docs.remnux.org/discover-the-tools/analyze+documents/microsoft+office)

## Usage
```bash
msoffcrypto-tool -p infected <encrypted.docx> <decrypted.docx>
msoffcrypto-tool -p password <encrypted.xlsx> <decrypted.xlsx>
```

## Recipes
- [[recipes/password-protected-office|Decrypt Password-Protected Office Document]]

## Workflows
- [[workflows/document-analysis-workflow|Malicious Document Analysis]] — Step 3: Password Handling (if encrypted)

## Related Tools
- [[tools/evilclippy|evilclippy]] — Remove VBA project password protection and manipulate Office
- [[tools/libolecf|libolecf]] — Microsoft Office OLE2 compound documents.
- [[tools/msoffcrypto-crack|msoffcrypto-crack.py]] — Recover the password of an encrypted Microsoft Office docume
- [[tools/msoffice-crypt|msoffice-crypt]] — Encrypt and decrypt OOXML Microsoft Office documents.
- [[tools/oledump|oledump.py]] — Analyze OLE2 files (Office documents), extract streams and V

#office #decryption #password