Notifications
Clear all

Decrypting linux

4 Posts
4 Users
0 Reactions
669 Views
(@opa-kup)
Active Member
Joined: 12 years ago
Posts: 11
Topic starter  

Hi,

I have new evidence - notebook with encrypted linux.
I can read some information from the beginning of sectors "LUKS aes xts-plain64 sha1".
I found some information about that - https://wiki.archlinux.org/index.php/Dm-crypt/Device_encryption…
Do you have someone any idea or experience how to decrypt this or which program or script is possible to find hash
for decrypting by hashcat or extreme brute forcer or some comercial software like Passware od Elcomsoft?

Thank you


   
Quote
UnallocatedClusters
(@unallocatedclusters)
Honorable Member
Joined: 13 years ago
Posts: 576
 

Try contacting forum member "thefuf". He/she is one of this site's true Linux experts.


   
ReplyQuote
(@dimrecords)
New Member
Joined: 11 years ago
Posts: 1
 

try bruteforce-luks
https://github.com/glv2/bruteforce-luks


   
ReplyQuote
(@thefuf)
Reputable Member
Joined: 17 years ago
Posts: 262
 

Search for a tool to brute-force attack LUKS. Also, it's worth to try to carve data from a LUKS partition, because many users don't wipe it (or cancel the wiping, because it takes too long).


   
ReplyQuote
Share: