12-02-2023, 05:44 PM
If I understand it correctly, you have succesfully obtained a hash thanks to fvde2john, and you're cracking it with 16700 ?
This means you also used the file Encrypted.plist.wipekey, which is used by HFS ?
This means you have acces to the physical disk ?
This means that you can inspect/mount/analyze the image and lookup the filesystem ?
This means you also used the file Encrypted.plist.wipekey, which is used by HFS ?
This means you have acces to the physical disk ?
This means that you can inspect/mount/analyze the image and lookup the filesystem ?