01-25-2017, 12:22 AM
wait, didn't you say it is a TrueCrypt boot volume ?
If so, the command you should be using is:
at least this is what I get from reading the hashcat wiki ("for a TrueCrypt boot volume (i.e. the computer starts with the TrueCrypt Boot Loader) you need to extract 512 bytes starting with offset 31744 (62 * 512 bytes).")
If so, the command you should be using is:
Code:
dd if=...DR2 of=boot_loader.tc bs=1 skip=31744 count=512at least this is what I get from reading the hashcat wiki ("for a TrueCrypt boot volume (i.e. the computer starts with the TrueCrypt Boot Loader) you need to extract 512 bytes starting with offset 31744 (62 * 512 bytes).")