06-03-2017, 05:03 PM
Hi there,
sorry for the delay, I've been quite busy lately
Indeed, looking at the error, it seems that your friend is using AxCrypt version 2.
Bad news is that I still haven't implemented it yet, either in JtR and hashcat
Bad news², a quick look at the new software seems to show that an unique password is used to protect all your files with the free version and you need to register on the Internet. I hope I'm wrong, but this would be very bad in terms of good practices of security for the end-users
Good news is that after taking a quick look, it appears that the file structure of encrypted files is not far from version 1 (same GUID for example), so maybe it will not be that long to understand how it works and implement an update version of axcrypt2john and corresponding algorithms in JtR and hashcat.
I'll try to find some time to implement it, stay tuned.
Concerning AxSuite, there are 2 tools. The first one is to be used in a context of the tool already launched, while the other is used to carve filesystem for any "saved" key.
Cheers!
sorry for the delay, I've been quite busy lately
Indeed, looking at the error, it seems that your friend is using AxCrypt version 2.
Bad news is that I still haven't implemented it yet, either in JtR and hashcat
Bad news², a quick look at the new software seems to show that an unique password is used to protect all your files with the free version and you need to register on the Internet. I hope I'm wrong, but this would be very bad in terms of good practices of security for the end-users
Good news is that after taking a quick look, it appears that the file structure of encrypted files is not far from version 1 (same GUID for example), so maybe it will not be that long to understand how it works and implement an update version of axcrypt2john and corresponding algorithms in JtR and hashcat.
I'll try to find some time to implement it, stay tuned.
Concerning AxSuite, there are 2 tools. The first one is to be used in a context of the tool already launched, while the other is used to carve filesystem for any "saved" key.
Cheers!