Need some help making an Autoit script for cracking a Truecrypt password in Windows 8

BirdDad

Golden Member
Nov 25, 2004
1,131
0
71
the password starts with don'tCumKnocking1010
then it is six characters which I do not know, I need to test for all of them
then the password ends with :
5050HaGotYa%
so it if the two characters are ABCDEF then :
don'tCumKnocking1010ABCDEF5050HaGotYa%
would be the complete password.
Here is what matricks suggested:
Code:
; Some definitions
Local $firstpart = don'tCumKnocking1010
Local $lastpart = 5050HaGotYa%
Local $possibleChars = "AaBbCcDdEeFf"
Local $possibleCharsArray = StringSplit($possibleChars)
Local $possibleCombos[UBound($possibleCharsArray)^6]

; Generate the possible combinations
Local $currentIndex = 0
For $firstChar In $possibleCharsArray
  For $secondChar In $possibleCharsArray
    $possibleCombos[$currentIndex] = $firstChar & $secondChar
  Next
Next


For $combo In $possibleCombos
  WinWaitActive("My Truecrypt container passphrase dialog")
  Send($firstpart & $combo & $lastpart) ; type entire passphrase into field
  Sleep(200) ; wait a little
  Send({ENTER}) ; press Enter 
  
  If WinExists("Truecrypt container opened!") ;if opening was successful, inform & break loop
    MsgBox("The passphrase was " & $firstpart & $combo & $lastpart)
    ExitLoop()
  EndIf ; If not successful, will try next combo
Next
I don't know how to implement this to interface with TruceCrypt mount, nor do I know exactly what is going on in the code(I can kind of tell how a lttle of it works but don't fully understand it).
Please help
Thank you
 

BirdDad

Golden Member
Nov 25, 2004
1,131
0
71
I know that the fist character is either a B or a b
second U or u or V or v
...so on.
Should I be using something else instead? I don't know much programming and didn't know which forum I was supposed to post this.
Is there a tool for windows that already does what I need it to do, if so what is it.
Thanks
 
Last edited:

Essence_of_War

Platinum Member
Feb 21, 2013
2,650
4
81
I think hashcat is the right tool for the job:

https://hashcat.net/wiki/doku.php?i...s_can_oclhashcat_get_the_rest_of_the_password

I have a half-known password. I know the first 4 letters, can oclHashcat get the rest of the password?

Yeah that actually works, thanks to the mask attack! To understand how to make use of this information you really need to read and understand the mask-attack basics. So please read this article first: Mask Attack

Now that you've read the Mask Attack article it's easy to explain. For example consider that you know that the first 4 chars of the password are “Pass” and you know that there's like 3 or 4 or 5 more letters following from which you do not know if they are letters, digits or symbols you can do the following mask:

Pass?a?a?a?a?a -i

To understand how this works with the incremental, please also read this article:

I do not know the password length, how can I increment the length of the password candidates?
 

Ken g6

Programming Moderator, Elite Member
Moderator
Dec 11, 1999
16,616
4,532
75
First, AutoIt is a language that allows you to automate tasks in Windows. It emulates mouse clicks, typing, and reading the screen. So an AutoIt script would have to try all the different cases and see if a dialog appears (or doesn't) showing the password was successful.

Hashcat attacks passwords for certain programs. Some versions of TrueCrypt appear to be among them. If it works, it should be pretty fast.

It sounds like you know the letters, though, just not the capitalization? So there are 2^6 = 64 possibilities. That's small enough that you could just make a list of them and try them manually. Might be faster than figuring out software to solve it.