Invoke-IR / PowerForensics

PowerForensics provides an all in one platform for live disk forensic analysis
MIT License
1.39k stars 274 forks source link

MBR GRUB BootCode Hash #132

Open JamesHabben opened 8 years ago

JamesHabben commented 8 years ago

The GRUB hash is listed in source as A6C7E63CA46F1CB2307E0F10AD897BDE

I have 2 sample GRUB MBRs that are both different. See: https://github.com/JamesHabben/MBR-Scan/tree/master/MBR%20Samples

BT5R2: 4004072431421EB6987F1A76377D26F0 Kali Grub: E93D266998C64F903D6E2758CA2F8EFB