Likely locations fo...
 
Notifications
Clear all

Likely locations for passwords?

15 Posts
6 Users
0 Reactions
1,701 Views
(@tpeoples)
Active Member
Joined: 12 years ago
Posts: 9
Topic starter  

Hi everyone, I wanted to post a quick update on this. I've gone through everything I can think of, and used the Passware function within encase to build several txts to use as dictionaries for a zip password tool I have. I've run all of them, and still nothing and I'm wondering if there's something else I'm doing wrong (going back to the 7zip and TrueCrypt situation).

Can anything recommend a possible solution, aside from the password being incorrect? I'm really racking my brain over this and I'm 99% sure the password I found is supposed to work. Any input would be greatly appreciated…thanks!!

Edit
I ran a trial version of passware and ran a protected files search on my system (I exported the .zip to my machine) and I got the following results

Name Type Doc Type Protection Flags
File.zip ZIP File Zip 5.1 Extraction password, AES Encryption
Movie.avi Video Clip Encrypted Container (True Crypt, etc.) Open password

So based on those results, do you think there would be two password? Is the avi a TC container? Any idea how to view it? I've never worked with TC before…


   
ReplyQuote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

tpeoples
try to analyze the data you have

Name Type Doc Type Protection Flags
File.zip ZIP File Zip 5.1 Extraction password, AES Encryption
Movie.avi Video Clip Encrypted Container (True Crypt, etc.) Open password

Again, the "outer" container is a .zip.

If you find the right password for it, it will extract the contents without errors.

Same if you use "test" in 7-zip or similar compressors and provide the "right" password.

This part is NOT difficult at all, the file will either "test OK" (with the right password) or give you an error (if the password is wrong).
Pretty much binary 0/1 or On/Off.

The contents of the .zip file seem like being a Truecrypt container (renamed as <whatever>.avi) with "Open password" (whatever that means).

Simply

  1. install Truecrypt
  2. make a small container
  3. rename it to &lt;something&gt;.avi
  4. compress it with 7-zip (choose AES encryption)
  5. test this .zip you created with the same software
  6. [/listo]
    Do you get the same output?
    If not try again with some other Truecrypt option…

    jaclaz


   
ReplyQuote
(@tpeoples)
Active Member
Joined: 12 years ago
Posts: 9
Topic starter  

Hi Jaclaz, thank you SO much for the clarification! That's just what I needed-I did as you recommended and attempted to extract the zip as normal (not even launching TC) and the password I used worked without issue. That said, it would appear that the pw I've attempted to use was incorrect (I'll have to backtrack a bit to try to find another likely pw).

I was so sure I had the correct one though, especially since the extra credit question hinted at it…maybe I should use this password as a starting point (ie examine what files it did open and find another pw from there).

Thanks again everyone, I'll keep you guys posted if I resolve this D


   
ReplyQuote
(@yoshiyoshi)
New Member
Joined: 12 years ago
Posts: 2
 

Hi, Did you resolve your problem?


   
ReplyQuote
(@tpeoples)
Active Member
Joined: 12 years ago
Posts: 9
Topic starter  

I didn't…I tried every permutation of the password that I could think of but still no luck. Fortunately, I don't think it was because it was a 7zip or TC file-I think I just had the wrong pw. Oh well… )


   
ReplyQuote
Page 2 / 2
Share: