Cracking truecrypt containers with truecrack

Intro

        Truecrack is a software designed to crack truecrypt containers using brute force attack or wordlist attack. It can be useful if you have created a truecrypt container and forgotten the password. The cracking speed depends on the computers CPU.


Disclaimer

This tutorial is ONLY for educational reasons. Do not misuse this information. I am not responsible for the way you use this knowledge. And remember with great power comes great responsibility.

How to use

syntax : 
truecrack -t [container path] [options]
Basic options : 
      -w [path] wordlist
      -c "[characters]" charset for brute force
      -s [number] minimum password length
      -m [number] maximum password length
      -v verbose mode
For more options and help see the man page :
man truecrack

Tutorial

       For this tutorial i have created a truecrypt container with the default options with a password '1234'. There are two ways to crack the container.


 One way is using a brute force attack and the other a wordlist attack. In this tutorial we are going to try both.

Brute force

To brute force  we are going to use the following command :
truecrack -t sectet_container -c "1234" -s 4 -m 4 -v
in this command we remember that the password contains the characters "1234" if you don't remember the password at all then use a different charset eg. "qwertyuiopasdfghjklzxcvbnm".
And then execute the command.
As you can see the password has been found

Wordlist

To crack the container with a wordlist, we will obviously need a wordlist. I have created a very small wordlist that contains the password.
To crack the container with a wordlist use the following command :
truecrack -t sectet_container -w wordlist.txt -v
And the password is found.

Opening the container

Opening the container using truecrypt
Opening the file
And its a cat :)

Download

Epilogue

If you have any questions or suggestions or if you noticed any mistakes or something i forgot don't hesitate to comment it bellow.

No comments:

Post a Comment