Truecrypt

[3di]

Hi Guys,

thanks for your detailed explanations, i didn’t expect so much information in the first run – so thanks again 😊.

I read and tried for several days, but now I'm not over getting some error messages.

I learned (at least it's a little)

• I have an encrypted Container with a hidden volume (not an encrypted drive) so some steps for me are a little different here
  

• I had a rough idea what the password could have been, but i already tried several runs using OTFBrutus with no luck -> so I think I have to choose a brute force attack
  

My Questions at the moment

• What I am not aware at the moment, shall I drive the attack against the whole container (about 200GB, most of it’ll be empty) or should I use the first 512byte Method?
  

• If so, how do I get it using dd (I downloaded an application chrysocome.net/dd), I'm not sure about the encryption, i used when creating the container. The example in Help looks like this:
  

Code:

dd if=hashcat_ripemd160_AES_hidden.raw of=hashcat_ripemd160_AES_hidden.tc bs=1 skip=65536 count=512

• How should i look like if the container is place on "D:\MyDir\sich_123" shall hashcat run from same (MyDir) folder?
  

• Shall I change "container_filename.tc" to "D:\MyDir\sich_123"?
  

• If I run Hashcat, how should my code look like, estimated Password might have been something like "hiddendatasave1245", i don't know the exact count of letters.
  
• Also here i don't know which typ of encription i chose back then, i just remember those where a cascade of three. So code 6213?
  

Code:

hashcat64 -m CODE -a 3 -w 3 --session myses --increment-min=1 -i container_filename.tc mask ?b?b?b?b?b?b?b?b

• And at least, where do I get a my_custom.dict?
  

I had no idea how complex it will be to crack my Container, but now I have already gone so far, I think i shouldn't give up :-)

Best Regards, and thanks for your help so far.

3di