Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20150903184936.13d06c6b@Riga>
Date: Thu, 3 Sep 2015 18:49:36 +0200
From: Chinatinte <chinatinte@....ch>
To: john-users@...ts.openwall.com
Subject: Re: Finding FileVault Password

Am Thu, 3 Sep 2015 08:22:20 +0200
schrieb Dhiru Kholia <dhiru.kholia@...il.com>:

> On Thu, Sep 3, 2015 at 12:55 AM, Chinatinte <chinatinte@....ch> wrote:
> > Here's my situation: I have a hard-drive from a Mac, fully
> > encrypted. No password is available, so it seems that I will have
> > to try a brute-force attack.
> >
> > Okay, I tried dmg2john against the encrypted harddrive. But no hash
> > was shown but the message that it is "not an encrypted DMG file!".
> > Well, what else could it be?
> 
> I am guessing that your Mac uses FileVault 2 (not supported by JtR,
> yet) for encrypting the hard drive.
> 
> You can try writing a small brute-forcing script which wraps
> https://github.com/libyal/libfvde, and it might just work (TM).
> 
> Dhiru

Ah, that's what I guessed at the end of the day.... Had hoped that FV2
would be implemented by now :-)

Ooookay, I'll try to script something together - if it works, I'll put
it in here. If I get stuck, I'll also appear here and yell for help :-)

Chint

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.