search

leo-stone / hack-petya

search key to restore petya encrypted mft
The Unlicense
613 stars 89 forks source link

How to get these bytes #13

Closed casmssm closed 5 years ago

casmssm commented 5 years ago

Hi, please help me. I want to get the data and nonce, but how i do this on Linux? Im trying using DD and XXD.

leo-stone commented 5 years ago

dd if=path of your disk or image of=nonce.txt bs=1 skip=27681 count=8 dd if=path of your disk or image of=src.txt bs=1 skip=28160 count=512

bs=1 means blocksize one byte skip=27681 is (54x512)+33 skip=28160 is (55x512)+0

hope it helps

On Fri, Mar 8, 2019 at 7:29 AM Carlos Martins notifications@github.com wrote:

Hi, please help me. I want to get the data and nonce, but how i do this on Linux? Im trying using DD and XXD.

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/leo-stone/hack-petya/issues/13, or mute the thread https://github.com/notifications/unsubscribe-auth/AOc_s2ABt3tPVfCJUZsMVMsuAKdyOsDZks5vUgNggaJpZM4bkvPT .

casmssm commented 5 years ago

Thank you, very much. I get it! Next step is to run Main.go file, but what is your language? Python?

leo-stone commented 5 years ago

Thank you, very much. I get it! Next step is to run Main.go file, but what is your language? Python?

https://golang.org/