Then you can use the output hash file to run the BitCracker attack. The extracted hash is fully compatible with the John The Ripper format. i, -image Path of memory unit encrypted with BitLocker build/bitcracker_hash -i -o Options: -h, -help Show this help The executables are stored in the build directory.īefore starting the attack, you need to run bitcracker_hash to extract the hash from the encrypted memory unit. Use the build.sh script to build 3 executables: Our attack has been tested on several memory units encrypted with BitLocker running on Windows 7, Window 8.1 and Windows 10 (both compatible and non-compatible mode). USB Key Mode: The user must insert a USB device that contains a startup key into the computer to be able to boot the protected OS.īitCracker is a mono-GPU password cracking tool developed only for volumes encrypted with the password authentication mode.User authentication mode: This mode requires that the user provide some authentication to the pre-boot environment in the form of a pre-boot PIN or password.Transparent operation mode: This mode uses the capabilities of TPM 1.2 hardware to provide for a transparent user experience: the key used for disk encryption is encrypted by the TPM chip and will only be released to the OS loader code if the early boot files appear to be unmodified.

It is designed to protect data by providing encryption for entire volumes, using by default AES encryption algorithm in cipher block chaining( CBC) or XTS mode with a 128-bit or 256-bit key.īitLocker can use three authentication mechanisms in order to implement encryption: A mono-GPU password cracking tool BitLocker is a full disk encryption feature included with Windows Vista and later.

Download bitlocker key