|
Search Results
|
| Post |
Author |
Forum |
Replies |
Views |
Posted
[asc]
|
| |
|
Thread: Location of TrueCrypt Hidden OS Header
Post: RE: Location of TrueCrypt Hidden OS Header
| The FAQ does not describe where to find a hidden OS volume header. |
|
Aubie |
hashcat
|
7 |
21,537 |
07-14-2017, 09:39 PM |
| |
|
Thread: Location of TrueCrypt Hidden OS Header
Post: RE: Location of TrueCrypt Hidden OS Header
| I tried both offset 0x1000 (65536 bytes after the beginning of the disk) and 0x17C00 (65536 bytes after the non-hidden volume header). Neither work. |
|
Aubie |
hashcat
|
7 |
21,537 |
07-14-2017, 08:03 PM |
| |
|
Thread: Location of TrueCrypt Hidden OS Header
Post: RE: Location of TrueCrypt Hidden OS Header
| I've read it, but that is referring to hidden volume of a container.
Quote:
--
If TrueCrypt uses a hidden partition, you need to skip the first 64K bytes (65536) and extract the next 512 bytes.
--
... |
|
Aubie |
hashcat
|
7 |
21,537 |
07-14-2017, 07:20 PM |
| |
|
Thread: Location of TrueCrypt Hidden OS Header
Post: Location of TrueCrypt Hidden OS Header
| The TrueCrypt documentation states that the location of a non-hidden header is the last 512 bytes of the first logical track of the system drive (Sector 62, 0x7C00).
Quote:
--
Note: When you enter a... |
|
Aubie |
hashcat
|
7 |
21,537 |
07-14-2017, 06:17 PM |
