Search Results
Post Author Forum Replies Views Posted [asc]
    Thread: FileVault2 with extracted keybag from Apple T2 chip
Post: RE: FileVault2 with extracted keybag from Apple T2...

Hello, sorry for my late response, but I also can't find any solution. I contacted Cellebrite for assistance, but don't get an answer yet. If I get a working solution, I will post it here.
Zen6 hashcat 4 10,308 02-21-2021, 11:09 PM
    Thread: FileVault2 with extracted keybag from Apple T2 chip
Post: FileVault2 with extracted keybag from Apple T2 chi...

Hello everybody, as explained in this (https://hashcat.net/forum/thread-9304.html) post, I'm trying to recover a FileVault2 password from a MacBook with a T2 chip. After getting down the rabbit ho...
Zen6 hashcat 4 10,308 01-14-2021, 09:51 AM
    Thread: APFS encrypted device with T2-Chip
Post: RE: APFS encrypted device with T2-Chip

Hi digitalhussar, can you share your information about extracting the keybag out of a T2 chip? Are you attacking over the Thunderbolt PCIe lines or over the USB debug port and chackm8/blackbird? I'...
Zen6 hashcat 2 6,059 01-08-2021, 11:06 PM
    Thread: Hashcat - APFS – FileVault 2 - Looking for assurances!
Post: RE: Hashcat - APFS – FileVault 2 - Looking for as...

This doesn't work. I get the same Initialization of KeyManager failed error. I try this with Banaanhangwagen's apfs2hashcat and also with sgan81's apfs-fuse. What kind of image i chose? I select Ra...
Zen6 General Talk 8 19,597 12-11-2020, 09:28 AM
    Thread: Is Cloud Cracking a good choice? Price Calculation
Post: RE: Is Cloud Cracking a good choice? Price Calcula...

Any major cloud computing provider has one big disadvantage: the ToS of nVidia. Normally you need the enterprise cards like Tesla, which are more expensive then consumer GeForce cards. My opinion i...
Zen6 hashcat 2 9,972 12-09-2020, 12:21 AM
    Thread: Hashcat - APFS – FileVault 2 - Looking for assurances!
Post: RE: Hashcat - APFS – FileVault 2 - Looking for as...

I'm sorry, this is my mistake.  1) Yes, brand new MacBook Air with Intel CPU. I mean macOS 11 and not OS X 10.11. My bad. 2) Yes, this MacBook Air has a T2 chip. 3) It is an APFS filesystem. For t...
Zen6 General Talk 8 19,597 12-09-2020, 12:06 AM
    Thread: Hashcat - APFS – FileVault 2 - Looking for assurances!
Post: RE: Hashcat - APFS – FileVault 2 - Looking for as...

Hi, I'm trying to get the FileVault2-Hash of a 2020 MacBook Air with macOS 10.11. How you acquire the image? I Use a second MacBook and the DUT in the Target disk mode: sudo dd if=/dev/disk2 of...
Zen6 General Talk 8 19,597 12-06-2020, 08:45 PM