±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36290
New Yesterday: 2 Visitors: 201

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Open TrueCrypt volume only with MasterKey

Forensic software discussion (commercial and open source/freeware). Strictly no advertising.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

banderas20
Member
 

Open TrueCrypt volume only with MasterKey

Post Posted: Jul 05, 19 05:41

Hi!

I have a ciphered TrueCrypt volume and I don't have the password, but I have the masterkey.

¿Is there any way to open it with masterkey? I have seen this video

www.youtube.com/watch?v=256sg1HDCh0

but I don't know which version of TrueCrypt he's using.

Can it be done?

Thanks!  
 
  

AmNe5iA
Senior Member
 

Re: Open TrueCrypt volume only with MasterKey

Post Posted: Jul 05, 19 11:32

The person in the video is using a modified version of TrueCrypt. Apparently modified by someone by the name Liqueur.
It is probably not trustworthy or even available to download and run on your computer.
Instead you could try:

https://github.com/AmNe5iA/MKDecrypt

or

https://github.com/4144414D/pytruecrypt

Both should allow you to mount using the masterkey.  
 
  

banderas20
Member
 

Re: Open TrueCrypt volume only with MasterKey

Post Posted: Jul 05, 19 13:53

- AmNe5iA
The person in the video is using a modified version of TrueCrypt. Apparently modified by someone by the name Liqueur.
It is probably not trustworthy or even available to download and run on your computer.
Instead you could try:

https://github.com/AmNe5iA/MKDecrypt

or

https://github.com/4144414D/pytruecrypt

Both should allow you to mount using the masterkey.


Hello!

With pytruecrypt I run (under "examples"):

python image.py key <master_keyfile> <volume_file> a
Code:
Traceback (most recent call last):
  File "image.py", line 71, in <module>
    from pytruecrypt import *
ImportError: No module named pytruecrypt

a is for AES.

With MKDecrypt, i run:

python MKDecrypt.py -m /mnt/raw1 <volume_file> <master_keyfile>
Code:
File "MKDecrypt.py", line 204
    print('Scanning byte ' + str(i*512) + ' of ' + str(evsize*512) + ' using' + crypt, end='                \r') 
                                                                                          ^
SyntaxError: invalid syntax

I'm unlucky.... Sad

Thanks!  
 
  

AmNe5iA
Senior Member
 

Re: Open TrueCrypt volume only with MasterKey

Post Posted: Jul 05, 19 14:04

pytruecrypt you have to install dependencies.

mkdecrypt needs to be run on linux (debian, ubuntu, kali...) and the latest version requires compiling a kernel module.

If you are definetly dealing with truecrypt not veracrypt then you can use an old version that doesn't require the kernel module but it will still need to be run in linux.  
 
  

banderas20
Member
 

Re: Open TrueCrypt volume only with MasterKey

Post Posted: Jul 05, 19 15:23

- AmNe5iA
pytruecrypt you have to install dependencies.

mkdecrypt needs to be run on linux (debian, ubuntu, kali...) and the latest version requires compiling a kernel module.

If you are definetly dealing with truecrypt not veracrypt then you can use an old version that doesn't require the kernel module but it will still need to be run in linux.


I am running them under DEFT (Linux based).

I'm dealing with TC. Not VC. I'll try that older version.

Thanks!  
 

Page 1 of 1