[prev in list] [next in list] [prev in thread] [next in thread] 

List:       john-users
Subject:    Re: [john-users] Finding FileVault Password
From:       Chinatinte <chinatinte () gmx ! ch>
Date:       2015-09-03 16:49:36
Message-ID: 20150903184936.13d06c6b () Riga
[Download RAW message or body]

Am Thu, 3 Sep 2015 08:22:20 +0200
schrieb Dhiru Kholia <dhiru.kholia@gmail.com>:

> On Thu, Sep 3, 2015 at 12:55 AM, Chinatinte <chinatinte@gmx.ch> wrote:
> > Here's my situation: I have a hard-drive from a Mac, fully
> > encrypted. No password is available, so it seems that I will have
> > to try a brute-force attack.
> >
> > Okay, I tried dmg2john against the encrypted harddrive. But no hash
> > was shown but the message that it is "not an encrypted DMG file!".
> > Well, what else could it be?
> 
> I am guessing that your Mac uses FileVault 2 (not supported by JtR,
> yet) for encrypting the hard drive.
> 
> You can try writing a small brute-forcing script which wraps
> https://github.com/libyal/libfvde, and it might just work (TM).
> 
> Dhiru

Ah, that's what I guessed at the end of the day.... Had hoped that FV2
would be implemented by now :-)

Ooookay, I'll try to script something together - if it works, I'll put
it in here. If I get stuck, I'll also appear here and yell for help :-)

Chint
[prev in list] [next in list] [prev in thread] [next in thread]