e-ago
Signature Not Found Windows 10 Bitlocker
└─$ bitcracker-master/build/bitcracker_hash -i image.001 3
---------> BitCracker Hash Extractor <--------- Encrypted device image.001 opened, size 228936.00 MB
************ Signature #1 found at 0x5592b8 ************ Version: 0 Invalid version, looking for a signature with valid version...
************ Signature #2 found at 0x559408 ************ Version: 0 Invalid version, looking for a signature with valid version...
************ Signature #3 found at 0x585010 ************ Version: 12 Invalid version, looking for a signature with valid version...
************ Signature #4 found at 0x5fca12 ************ Version: 79 Invalid version, looking for a signature with valid version...
************ Signature #5 found at 0x6e6088 ************ Version: 12 Invalid version, looking for a signature with valid version...
************ Signature #6 found at 0x75a5a2 ************ Version: 79 Invalid version, looking for a signature with valid version...
************ Signature #7 found at 0x1f83a74 ************ Version: 12 Invalid version, looking for a signature with valid version...
************ Signature #8 found at 0x1fed92a ************ Version: 79 Invalid version, looking for a signature with valid version...
************ Signature #9 found at 0x20895c8 ************ Version: 0 Invalid version, looking for a signature with valid version...
************ Signature #10 found at 0x20896f8 ************ Version: 0 Invalid version, looking for a signature with valid version...
************ Signature #11 found at 0x20ca2b8 ************ Version: 0 Invalid version, looking for a signature with valid version...
************ Signature #12 found at 0x20ca408 ************ Version: 0 Invalid version, looking for a signature with valid version...
************ Signature #13 found at 0x20f6010 ************ Version: 12 Invalid version, looking for a signature with valid version...
************ Signature #14 found at 0x216da12 ************ Version: 79 Invalid version, looking for a signature with valid version...
************ Signature #15 found at 0x22766b8 ************ Version: 0 Invalid version, looking for a signature with valid version...
************ Signature #16 found at 0x2276808 ************ Version: 0 Invalid version, looking for a signature with valid version...
************ Signature #17 found at 0x22a2410 ************ Version: 12 Invalid version, looking for a signature with valid version...
************ Signature #18 found at 0x2319e12 ************ Version: 79 Invalid version, looking for a signature with valid version...
************ Signature #19 found at 0x23fb1d8 ************ Version: 0 Invalid version, looking for a signature with valid version...
************ Signature #20 found at 0x23fb300 ************ Version: 0 Invalid version, looking for a signature with valid version...
************ Signature #21 found at 0x2425a00 ************ Version: 12 Invalid version, looking for a signature with valid version...
************ Signature #22 found at 0x249b1b2 ************ Version: 79 Invalid version, looking for a signature with valid version...
************ Signature #23 found at 0x258edd8 ************ Version: 0 Invalid version, looking for a signature with valid version...
************ Signature #24 found at 0x258ef00 ************ Version: 0 Invalid version, looking for a signature with valid version...
************ Signature #25 found at 0x25b9600 ************ Version: 12 Invalid version, looking for a signature with valid version...
************ Signature #26 found at 0x262edb2 ************ Version: 79 Invalid version, looking for a signature with valid version...
************ Signature #27 found at 0x7500003 ************ Version: 8 Invalid version, looking for a signature with valid version...
************ Signature #28 found at 0xfa73000 ************ Version: 2 (Windows 7 or later)
=====> VMK entry found at 0xfa73101 Encrypted with User Password (0xfa73122) Error: VMK not encrypted with AES-CCM
************ Signature #29 found at 0x4f96d000 ************ Version: 2 (Windows 7 or later)
=====> VMK entry found at 0x4f96d101 Encrypted with User Password (0x4f96d122) Error: VMK not encrypted with AES-CCM
************ Signature #30 found at 0xa7d25000 ************ Version: 2 (Windows 7 or later)
=====> VMK entry found at 0xa7d25101 Encrypted with User Password (0xa7d25122) Error: VMK not encrypted with AES-CCM Error while extracting data: No signature found!
Error while parsing input device image
Is it possible to extract hash?
Could you maybe elaborate what exactly you mean? I assume you mean openwall/john. But how does that incluce Bitcracker?
EDIT: Got it, john includes bitcracker2john, which can be used like Bitcracker's bitcracker_hash.
