password protected ...
 
Notifications
Clear all

password protected hard disk

4 Posts
4 Users
0 Reactions
1,142 Views
(@krishna)
Trusted Member
Joined: 17 years ago
Posts: 47
Topic starter  

hi all

i wanted to image a password protected hard disk. the forensic dossier says the hard disk is pass word protected, unlock to continue. talon will not recognise the hard disk. i tried to clone with CAINE, but could not complete as it shows lot of bad sectors. my pc able to see the disk, but will not mount. encase preview shows unused disk area, nothing is shown. is it there any method to image this disk with all the integrity of the disk is maintained. thanks for ideas in advance.

cheers,


   
Quote
(@encaser)
Active Member
Joined: 12 years ago
Posts: 14
 

hi
have you got UDMA PC-3000 ?
you must use your hdd utilyties, run utilyties and "work with service area"
password removing is very easy with pc-3000


   
ReplyQuote
(@Anonymous 6593)
Guest
Joined: 17 years ago
Posts: 1158
 

i wanted to image a password protected hard disk.

So you either need the password, or a way to bypass it.

i tried to clone with CAINE, but could not complete as it shows lot of bad sectors.

I interpret that as follows you have the password, you've unlocked the disk, and tried to image it, but you get bad sectors. Is that correct?

If not – if you don't have the password, there's no point in trying to image the drive. In that case, those bad sectors are probably simply errors that indicate that you're not authorized to access the HDD.

If you have the password, but it didn't work – is it a user password or master password? And do you know how to login to either? Using a master password for a user password is unlikely to work.

thanks for ideas in advance.

In general, the best thing would be to take a fairly modern HDD, and sit down and experiment with passwords to see how you can identify a password-protected HDD, and how your tools handle one (both user password and master password). (Be prepared to brick a few HDDs in this process, so don't use the most expensive ones or drives that you can't do without …)

If you don't have the password or the time to do that, you'll have to examine other options, mentioned in another post in this thread.


   
ReplyQuote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

Also, if I may, "a password protected harddisk" means "nothing".
A specific type of disk (IDE/PATA vs. SATA vs. SCSI vs. SAS vs. *whatever*) may make a difference.
A specific make/brand of disk (Seagate vs. WD v.s Toshiba, etc.) may make a difference.
A specific model of a given manufacturer may make a difference.

Just as an example, for a whole "class" of WD disk drives changing or by-passing the password is documented and can be done with commonly available software.

As well, "advanced" software or hardware tools may be not compatible with a specific make/model of disk.

jaclaz


   
ReplyQuote
Share: