Decrypting linux

General (Technical, Procedural, Software, Hardware etc.)

Last Post by thefuf 10 years ago

4 Posts

4 Users

0 Reactions

840 Views

RSS

OPA-KUP

(@opa-kup)

Active Member

Joined: 13 years ago

Posts: 11

Topic starter 13/04/2016 5:25 pm [#14069]

Hi,

I have new evidence - notebook with encrypted linux.
I can read some information from the beginning of sectors "LUKS aes xts-plain64 sha1".
I found some information about that - https://wiki.archlinux.org/index.php/Dm-crypt/Device_encryption…
Do you have someone any idea or experience how to decrypt this or which program or script is possible to find hash
for decrypting by hashcat or extreme brute forcer or some comercial software like Passware od Elcomsoft?

Thank you

Quote

UnallocatedClusters

(@unallocatedclusters)

Honorable Member

Joined: 14 years ago

Posts: 576

13/04/2016 6:03 pm

Try contacting forum member "thefuf". He/she is one of this site's true Linux experts.

ReplyQuote

dimrecords

(@dimrecords)

New Member

Joined: 12 years ago

Posts: 1

14/04/2016 2:14 pm

try bruteforce-luks
https://github.com/glv2/bruteforce-luks

ReplyQuote

thefuf

(@thefuf)

Reputable Member

Joined: 18 years ago

Posts: 262

14/04/2016 4:40 pm

Search for a tool to brute-force attack LUKS. Also, it's worth to try to carve data from a LUKS partition, because many users don't wipe it (or cancel the wiping, because it takes too long).

ReplyQuote