07-14-2017, 08:11 PM
I'm not sure why you are even trying to "brute-force" the offset.
The instructions are very clear: if the whole disk (operating system) is encrypted i.e. the system starts with the special boot loader (a so called boot volume), "you need to extract 512 bytes starting with offset 31744 (62 * 512 bytes)." as the FAQ already says https://hashcat.net/faq#how_do_i_extract...pt_volumes
The instructions are very clear: if the whole disk (operating system) is encrypted i.e. the system starts with the special boot loader (a so called boot volume), "you need to extract 512 bytes starting with offset 31744 (62 * 512 bytes)." as the FAQ already says https://hashcat.net/faq#how_do_i_extract...pt_volumes