Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <769116aa-81b5-6c4b-1882-d7f515eeb749@gmail.com>
Date: Tue, 28 Aug 2018 13:04:42 +0200
From: CRO <enigmista1980@...il.com>
To: john-users@...ts.openwall.com
Subject: Re: Filevault2 volume without password

Summary

------------------
-- dmg2john way --
------------------
# mmls image.raw
GUID Partition Table (EFI)
Offset Sector: 0
Units are in 512-byte sectors

        Slot      Start        End          Length       Description
000:  Meta      0000000000   0000000000   0000000001   Safety Table
001:  -------   0000000000   0000000039   0000000040   Unallocated
002:  Meta      0000000001   0000000001   0000000001   GPT Header
003:  Meta      0000000002   0000000033   0000000032   Partition Table
004:  000       0000000040   0000409639   0000409600   EFI System
Partition
005:  001       0000409640   0488965175   0488555536   No title
006:  002       0488965176   0490234711   0001269536   Recovery HD
007:  -------   0490234712   0490234751   0000000040   Unallocated

# dd if=image.raw of=partition.dd bs=512 skip=409640 count=488555536

# fdisk -l partition.dd
Disk partition.dd: 233 GiB, 250140434432 bytes, 488555536 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes

# dmg2john partition.dd
partition.dd is not an encrypted DMG file!


-------------------
-- fvde2john way --
-------------------
# fvdeinfo -v -p fake /dev/mapper/loop0p2
fvdeinfo 20180821

Unable to open: /dev/mapper/loop0p2.
libfvalue_utf8_string_with_index_copy_to_integer: unsupported character 
value: 0x78 at index: 1.
libfvalue_utf8_string_copy_to_integer: unable to copy UTF-8 string to 
integer value.
libfplist_property_get_value_integer: unable to convert value to integer.
libfvde_encrypted_metadata_read_type_0x001a: unable to retrieve logical 
volume size.
libfvde_encrypted_metadata_read: unable to read metadata block type 0x001a.
libfvde_volume_open_read: unable to read primary encrypted metadata.
libfvde_volume_open_file_io_handle: unable to read from file IO handle.
info_handle_open_input: unable to open input volume.


Issue reported here: https://github.com/libyal/libfvde/issues/36

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.