04-07-2015, 10:26 AM
Thanks for the replies. The reason that I thought the truecrypt_volume2john format would work is because the pdf2john format is used to extract the hashes for PDF files. I actually passed the result from truecrypt_volume2john to oclhascat directly on the cli and it did not error out with a "no hashes loaded". In fact it did load a single hash (no idea what it was though) and went though my dictionary and returned an "exhausted" result. This is why i found it puzzling.
While I know that this isn't a hashtopus support forum, if its ok, i'll post my work around here for those who do want to use it for truecrypt files. I haven't managed to get it to do a list of "hashes" yet, but it can process single files at a time. With your TC container, simply use a hex editor or dd to copy out the first 512 bytes of info from the file into a seperate .bin file and then upload that to hashtopus as a binary file type in the hashlists option. And that's it!
Thanks for the help though.
While I know that this isn't a hashtopus support forum, if its ok, i'll post my work around here for those who do want to use it for truecrypt files. I haven't managed to get it to do a list of "hashes" yet, but it can process single files at a time. With your TC container, simply use a hex editor or dd to copy out the first 512 bytes of info from the file into a seperate .bin file and then upload that to hashtopus as a binary file type in the hashlists option. And that's it!
Thanks for the help though.