+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: Noob question. Partially lost pass in TC. Can we do it? (/thread-5645.html)
Noob question. Partially lost pass in TC. Can we do it? - krl - 07-13-2016
Hello there,
I desperately need to find out my old pass to my TC container. The problem is that I kinda partially know the password but I forgot proper order of character in it.
It looks like this: hashcat BUT I made it like this H@shc@t or Ha5sc@at ooor h@s4cat etc.
Can I restore somehow using hashcat? Can anyone help me with this?
I owe You good polish beer for helping me with this matter.
RE: Noob question. Partially lost pass in TC. Can we do it? - rico - 07-13-2016
Try running it though a wordlist using the included leetspeak rule, i.e. use "-r rules/leetspeak.rule" in the command.
You'll need to extract the hash from the TC container first though. This might help: http://0x31.de/cracking-truecrypt-container-non-system-system/
RE: Noob question. Partially lost pass in TC. Can we do it? - Szulik - 07-13-2016
plz try take "hashcat" as base word in dictionary and use leet rule
EDIT
I see i reply couple seconds to late.
If simple leetspeek.rule cant help consider use it 2, or 3 Times OR unix-ninja_common-leetspeak.rule or Incisive-leetspeak.rule
RE: Noob question. Partially lost pass in TC. Can we do it? - krl - 07-13-2016
I'll come back with results. Thanks for tips