search

libyal / libbde

Library and tools to access the BitLocker Drive Encryption (BDE) encrypted volumes
GNU Lesser General Public License v3.0
216 stars 53 forks source link

how to use #42

Closed tlhszc closed 5 years ago

tlhszc commented 5 years ago

I have downloaded “libbde-alpha-20190317.tar.gz” software, and installed it through setup.py in the Kali Linux system environment. How can I use this software under Kali linux? Do you have software instructions?

joachimmetz commented 5 years ago

What software are you hoping to use under Kali? This project mainly provides a library that you program against. There are couple of tools for convenience. Please read https://github.com/libyal/libbde/wiki/Building#read-first on how to build those.

Setup.py will only build the Python bindings. On how to use them see: https://github.com/libyal/libbde/wiki/Development

tlhszc commented 5 years ago

I want to decrypt the BitLocker hard disk partition with the FVEK key through ibbde. In Kali system, how to use libbde tool most conveniently.

joachimmetz commented 5 years ago

If Kali does not provide the bdeinfo and bdemount binaries already build them using https://github.com/libyal/libbde/wiki/Building. Instructions on how to use bdemount https://github.com/libyal/libbde/wiki/Mounting. See bdemount -h how to specify the FVEK and or TWEAK keys

tlhszc commented 5 years ago

If Kali does not provide the bdeinfo and bdemount binaries already build them using https://github.com/libyal/libbde/wiki/Building. Instructions on how to use bdemount https://github.com/libyal/libbde/wiki/Mounting. See bdemount -h how to specify the FVEK and or TWEAK keys

This software is already available in kali. Know the FVEK and TWEAK keys, can you mount the encrypted USB flash drive with the command "bdemount -k 3c78a84cf22b306354cd65f215d1c931:5c6c114c10a7e5b2de078c23d4295fef /dev/sdb /mnt/bde"?

joachimmetz commented 5 years ago

Yes if these are the correct keys you should be able mount a BDE volume in that way. If you're using /dev/sdb you might need to specify an offset as well or use /dev/sdb1 instead

tlhszc commented 5 years ago

Yes if these are the correct keys you should be able mount a BDE volume in that way. If you're using /dev/sdb you might need to specify an offset as well or use /dev/sdb1 instead

After running the command "bdemount-k 3c78a84cf22b306354cd65f215d1c931:5c6c114c10a7e5b2de078c23d4295fef/dev/sdb/mnt/bde", display the following information:

root@kali:~# bdemount -k 3c78a84cf22b306354cd65f215d1c931:5c6c114c10a7e5b2de078c23d4295fef /dev/sdb /mnt/
bdemount 20190317

No sub system to mount BDE format.

Why is this problem occurring?

joachimmetz commented 5 years ago

that is explained here https://github.com/libyal/libbde/wiki/Mounting#mounting

tlhszc commented 5 years ago

that is explained here https://github.com/libyal/libbde/wiki/Mounting#mounting

Thank you for your help. I have been able to mount the U disk under kali.The reason for the above problem is that the original kalii system did not install libfuse-dev.

joachimmetz commented 5 years ago

Good to hear you got it working, closing this issue.