[prev in list] [next in list] [prev in thread] [next in thread] 

List:       john-users
Subject:    Re: [john-users] JtR on Acronis .tib files?
From:       Dhiru Kholia <dhiru.kholia () gmail ! com>
Date:       2015-01-15 13:13:59
Message-ID: alpine.DEB.2.11.1501151407040.9806 () roameo
[Download RAW message or body]

On Thu, 15 Jan 2015, David J Anderssen wrote:

> First I would like to say thank you for the great work on JtR. I'm
> posting hoping to learn if JtR can be used on Acronis True Image
> backup (.tib) files, as I've lost the password to one.
>
> Assuming a similar encryption scheme, I tried truecrypt_volume2john
> from 1.8.0-Jumbo-1 which seems to process .tib files without throwing
> any errors, but the resulting hash doesn't seem to be correct.

truecrypt_volume2john.c accepts almost everything (for good reasons).

So it won't produce real hashes for .tib files.

> Has work been done on this .tib format previously? It seems to be
> nearly supported if treated liked a truecrypt volume, or at least
> truecrypt_volume2john will return hashes from a .tib file without
> printing an error. If the two formats are similar might there be a
> tib2john? I could also be doing something wrong resulting in the
> failed cracking. If anyone could please comment on this format it
> would be greatly appreciated.

JtR doesn't support cracking .tib files, currently.

I am not aware of any other projects (or products) which support this
proprietary file format.

http://en.wikipedia.org/wiki/Acronis_True_Image#Format_conversion tells
a funny story about .tib files.

Dhiru
[prev in list] [next in list] [prev in thread] [next in thread]