02-13-2014, 12:15 PM
I'm currently working on cracking a sha512crypt hash. I've got an image of the hard disk it came from so I'm trying to initally concentrate on generating word lists from the disk image.
Other than simply using 'strings' across the image (which I've already done), I'd be interested if anyone uses a more intelligent methods of generating keyword lists from disk images.
My next plan was to try and generate a wordlist from the mounted filesystem with all compound files expanded, which I suspect will give me a more accurate wordlist, capturing words which fall across sector boundaries, inside archives etc.
In this instance, the file system of the target device if EXT4, but I'd also be interested in tools for NTFS based systems or tools for generating keyword lists from specific system areas such as pagefile/hyberfile (e.g. using tools such as violatility to structure the data prior to extraction)
Any comments of advice would be appreciated
Cheers
D
Other than simply using 'strings' across the image (which I've already done), I'd be interested if anyone uses a more intelligent methods of generating keyword lists from disk images.
My next plan was to try and generate a wordlist from the mounted filesystem with all compound files expanded, which I suspect will give me a more accurate wordlist, capturing words which fall across sector boundaries, inside archives etc.
In this instance, the file system of the target device if EXT4, but I'd also be interested in tools for NTFS based systems or tools for generating keyword lists from specific system areas such as pagefile/hyberfile (e.g. using tools such as violatility to structure the data prior to extraction)
Any comments of advice would be appreciated
Cheers
D