12-06-2016, 02:18 PM
The mask should be right, I used " echo "31744/512" | bc " and got out of it "62".
then I used: " dd if=/dev/sdb of=/root/Desktop/512byte-at-offset-31744.dd bs=512 count=1 skip=62 "
so the 31744 offset was applied, but the guy on the site that i provided the link for uses -m 6241 insted of -m 13761 so
maybe thats my issue, should I use 6241 ?
I don't know if it's cascaded, I didn't explicitliy double encrypted it.
I assume the "cascaded cypher" means that the hash was encrypted with something else, which I didn't do.
I just followed the full drive system encryption wizard provided by veracrypt for windows, so if it would be cascaded then it was cascaded by the pretty much left to default settings of the veracrypt wizard.
then I used: " dd if=/dev/sdb of=/root/Desktop/512byte-at-offset-31744.dd bs=512 count=1 skip=62 "
so the 31744 offset was applied, but the guy on the site that i provided the link for uses -m 6241 insted of -m 13761 so
maybe thats my issue, should I use 6241 ?
I don't know if it's cascaded, I didn't explicitliy double encrypted it.
I assume the "cascaded cypher" means that the hash was encrypted with something else, which I didn't do.
I just followed the full drive system encryption wizard provided by veracrypt for windows, so if it would be cascaded then it was cascaded by the pretty much left to default settings of the veracrypt wizard.