Veracrypt boot mode SHA512

[LK4RMA]

TLDR;
okay got it
mode 29421 up to 29423 are capable of cracking
you need to extract the data from the physical disk, not the partition and then extract the needed hash with
veracrypt2hashcat.py --offset bootable

to verify:

i used hxd to extract the first 5mb from the physical disk and also the first 5 mb of the windows-partition after installing and encrypting the windows system with veracrypt, default setup

then i used these two binary-data files with Veracrypt2Hashcat.py and all possible offset options, gaining 8 different hashes (2 are empty), running hashcat agaings these hashes and sucessfull cracked "Qwerty"

the funny thing is, hashcat already tells, that all of these hashes, except for one (see mssing error for line 6), seems not "right"

Code:

Hashfile 'vera-hashes.txt' on line 1 (partit...0000000000008a01a301b901000055aa): Insufficient entropy exception
Hashfile 'vera-hashes.txt' on line 2 (partit...f826f926fa26fb26fc26fd26fe26ff26): Insufficient entropy exception
Hashfile 'vera-hashes.txt' on line 3 (partit...f868f968fa68fb68fc68fd68fe68ff68): Insufficient entropy exception
Hashfile 'vera-hashes.txt' on line 4 (partit...f8a6f9a6faa6fba6fca6fda6fea6ffa6): Insufficient entropy exception
Hashfile 'vera-hashes.txt' on line 5 (hdd_0:...000000000000000000000000000055aa): Insufficient entropy exception
Hashfile 'vera-hashes.txt' on line 7 (hdd_hi...00000000000000000000000000000000): Insufficient entropy exception
Hashfile 'vera-hashes.txt' on line 8 (hdd_bo...00000000000000000000000000000000): Insufficient entropy exception

Thank you very much !! It's working now !!
I didn't expect the hash to be extracted from the beginning of the physical partition.
I thought I had to skip the EFI partition.

For my part I used a VM, so I needed to convert the vdi snapshot to RAW.
Used Veracrypt2Hashcat on the RAW partition and it's good !!

Thank you so much !!
Back to work hehe