http://xmr.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion/HTB/Medium/40.html
. - Bruce
[ 10.10.14.47/23 ] [ /dev/pts/3 ] [~/_HTB/Arkham]
→ file backup.img
backup.img: LUKS encrypted file, ver 1 [aes, xts-plain64, sha256] UUID: d931ebb1-5edc-4453-8ab1-3d23bb85b38e And here we are dealing with a LUKS encrypted backup file which we have to crack, to do so we will first use dd to get the header hash: [ 10.10.14.47/23 ] [ /dev/pts/3 ] [~/_HTB/Arkham]
→ dd if=backup.img of=luks-header bs=512 count=4097
4097+0 records in
4097+0 records out
2097664 bytes (2.1 MB, 2.0 MiB)...