Questions -> FAQ -> extract the hashes from TrueCrypt volumes
#2
The use of the last 512 byte goes back to the mbr placement on the first in case of a booting partition. Not sure how it is with a non booting partition. It could be the first 512 byte because there's no mbr. You should simply try out. Create such a disk and crack your own disc. It will be either the first or the last 512 byte.


Messages In This Thread
RE: Questions -> FAQ -> extract the hashes from TrueCrypt volumes - by atom - 09-05-2016, 09:32 AM