04-25-2022, 03:19 PM
(04-25-2022, 12:37 PM)b8vr Wrote: When cracking TrueCrypt containers like that, which are not bootable, you have several modes available in hashcat. But you can actually focus on just three. If you run hashcat in mode 6213, it will also cover 6211 and 6212. This is true for all the TrueCrypt (and VeraCrypt) modes. So you can focus on 6213, 6223 and 6233.
I can't remember which is default mode, but I think it's 6211 or 6221, so you could also just focus on those.
So I would just run hashcat three times with either modes and hope for the best basically? (after extracting the hashes for each mode)