01-15-2018, 09:15 AM
That's not how you can extract the data. You need to provide to hashcat not only the header/metadata but also some part of the encrypted data. If you reduce it to only the first bytes (metadata), hashcat can't verify if the decryption worked correctly.
I'm not sure where you read that the "luksHeaderBackup" method of cryptsetup is able to extract the data that hashcat needs. It's definitely not correct.
The guide is very clear: you need the whole header + some data from the disk/volume: https://hashcat.net/forum/thread-6225-po...l#pid33187 (otherwise, as said, hashcat can't verify if the password was correct).
I'm not sure where you read that the "luksHeaderBackup" method of cryptsetup is able to extract the data that hashcat needs. It's definitely not correct.
The guide is very clear: you need the whole header + some data from the disk/volume: https://hashcat.net/forum/thread-6225-po...l#pid33187 (otherwise, as said, hashcat can't verify if the password was correct).