Specific file-types

KDBX

keepass2john database.kdbx > hash.txt

Remove name of database from beginning of file, for example Database:

Now brute

hashcat -m 13400 hash.txt /usr/share/wordlists/rockyou.txt --force

For Keepass 4, use:

GitHub - r3nt0n/keepass4brute: Bruteforce Keepass databases (KDBX 4.x format)GitHub

Protected Office Files

In this example, a protected .xlsx file

office2john logins.xlsx > logins_hash.txt

(remove filename prefix from logins_hash.txt)

hashcat -a 0 logins_hash.txt /usr/share/wordlists/rockyou.txt --force

Autodetect, in this case -> 9600 | MS Office 2013 | Document