TCHead - Cracked (Free TrueCrypt Password Cracking)

Cracked | Download | FAQ | TCHead won two first place prizes at Defcon 20

Steps to submit the first 32,768 bytes of a hard drive

  1. dd if=image.bin of=32768.bin bs=32k count=1 OR if=/dev/sdX of=32768.bin bs=32k count=1
  2. Email 32768.bin as an attachment to tchead@16s.us
  3. If the password is cracked, it will be posted below along with the sha1sum of 32768.bin

Notes

  • You must be familiar with disk imaging. I cannot help you with step 1. If you have done it correctly, the command strings 32768.bin | grep True will return TrueCrypt Boot Loader. The file will also fail an entropy test (it will not be random). Submissions that fail these tests are automatically discarded. 95% of submitted files are incorrect and thus rejected. Run the strings command (listed above) before submitting.
  • This only works with system encrypted hard drives that have been encrypted by TrueCrypt 7.0 or later.
  • If you'd rather the cracked password not be posted below, I will just email it to you.
  • 32768.bin contains the first 32,768 bytes of a hard drive.
  • Strong passwords will not be cracked. It's not possible.

Cracks

Cracked Password sha1sum of 32768.bin
Password123 2b9da324c05015de0bf3fed94b3768911f360ad9
mysecret dd9b951df27ee00ea071da4281b32f0aa9dcc16a