search

e-ago / bitcracker

BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker
GNU General Public License v2.0
819 stars 188 forks source link

BitlockerToGo #25

Open darryllane opened 4 years ago

darryllane commented 4 years ago

I have a USB drive encrypted with BitlockerToGo, can you confirm if this is supported?

I have been looking around for examples on how to try attack this but the examples I have come across dont quite sound like the same as the scenario I find myself in.

The drive does have an excutable called "BitLockerToGo.exe" amoungst various other files, and executing this exe on a Windows machines prompts the user for a password to unlock the drive. So I would assume a password attack is well suited. It seems creating an image of the drive and attempting to launch this via VM software such as fusion fails.

I also attempted to ID any signatures via the jtr release but the conversion to John failes as it can not find any sigures.

So I am wondering if bitcracker supports this encrypted drive or not.

HelderMagalhaes commented 4 years ago

"BitLocker To Go is BitLocker Drive Encryption on removable data drives". So I'd immediately say yes (even without in-depth knowledge of the project). Unless the "BitLockerToGo.exe" you refer to is not the standard but simply an encryption solution which by "accident" borrowed that name. You'd have to provide further details, such as vendor/model (if it was factory-encrypted) or, at least, the executable details (if it was user-encrypted).