kkamagui / bitleaker

This tool can decrypt a BitLocker-locked partition with the TPM vulnerability
Other
187 stars 35 forks source link

Checking the resource manager process... Fail #23

Closed itFIX90 closed 2 months ago

itFIX90 commented 2 months ago

Hi,

So got myself into a situation where my laptop wants a code for bitlocker... I'm not a linux expert, just a guy with random knowledge, so please bear with me if I say something stupid (I'm really sorry).

So what I did was - download the the official linux image, installed it on a USB drive. The system was in UEFI mode when I did this. (I'm not sure what the instruction meant by: "Install with UEFI mode, otherwise it will not work").

Then I executed the bootsrap/build commands and was able to execute the script. Below is the output:

Search for BitLocker-locked partitions.
    [>>] BitLocker-locked partition is [/dev/nvme0n1p4]

Loading BitLeaker kernel module... Success
Entering sleep...
    [>>] Please press any key or power button to wake up...
Waking up...
    [>>] Please press any key to continue...

Preparing PCR data.
    [>>] Get PCR data from BitLeaker driver... Success

Cut and extract essential PCR data.
    [>>] Extract PCR numbers and SHA256 hashes... Success

Replay TPM data.
    [>>] Checking the resource manager process...
Fail

As you can see, something went wrong.. But don't have sufficient knowledge on the matter. So any advice would be highly appreciated.

P.S. The Secure Boot is disabled, as I cannot boot the Ubuntu flash drive if it is enabled. Perhaps I did something wrong. And another thing: Whenever I restart my laptop, and try to boot Ubuntu, I get the following message (photo attached) photo_2024-09-19_17-47-28 That indicates that the Bitleaker is running on boot. And after I press a key - it actually prints out the contents of PCRs. However they disappear almost instantly. And the Ubuntu loads

itFIX90 commented 2 months ago

Found the problem. The windows boot manager was disabled in BIOS so only Ubuntu was booting. After enabling it - the script proceeded. However there is another issue. I'll post the details a bit later