Hi /g/, I recently bought another 2TB hard drive for 30 bucks - /g/ - Technology

Thread replies: 13
Thread images: 6

Anonymous
2017-09-16 05:57:51 Post No. 62455952
[Report] Image search: [Google]

File: Screenshot from 2017-09-15 15-57-31.png (689KB, 1920x1080px) Image search: [Google]

689KB, 1920x1080px

Anonymous 2017-09-16 05:57:51 Post No. 62455952 [Report]

Hi /g/, I recently bought another 2TB hard drive for 30 bucks from someone in my town, I'm gonna use it for tstoring my taiwanese biking cartoons. Heres the /g/ related part: It's encrypted. Yes I know I could just format and forget about it, but why would I give up the oppurtinity to learn something new? I need your help because I don't know where to being. Ill post screenshots of the file branches and stuff through out this thread, but for general information:

-It's a seagate 2TB 7200 rpm drive
-@ root directory there are three folders: "burst" , "$RECYCLE.BIN" , "System Volume Information"

-within "burst" directory there is a file named "1934262875563248027_71753733_7004160_7004160" (pic related)

CONT

Anonymous 2017-09-16 06:00:56 Post No.62455978
[Report] Image search: [Google]

Anonymous 2017-09-16 06:00:56 Post No.62455978 [Report]

File: Screenshot from 2017-09-15 23-00-37.png (652KB, 1920x1080px) Image search: [Google]

652KB, 1920x1080px

>Within "$RECYCLE.BIN" there are four more directories, each contain a single "desktop.ini" file (pic related are the folders with the ini files).

Anonymous 2017-09-16 06:02:41 Post No.62455993
[Report] Image search: [Google]

Anonymous 2017-09-16 06:02:41 Post No.62455993 [Report]

File: Screenshot from 2017-09-15 23-02-24.png (663KB, 1920x1080px) Image search: [Google]

663KB, 1920x1080px

>Within "System Volume Information" there are three files, "IndexerVolumeGuid" , "tracking.log" (LMAO) , and "WPSettings.dat"

Anonymous 2017-09-16 06:03:00 Post No.62455995
[Report]

Anonymous 2017-09-16 06:03:00 Post No.62455995 [Report]

Best bet is to bruteforce it. Can you get volume info from the header? `man cryptsetup` and get comfy, youll be waiting a little bit.

Anonymous 2017-09-16 06:03:26 Post No.62456001
[Report]

Anonymous 2017-09-16 06:03:26 Post No.62456001 [Report]

run testdisk to recover deleted files.
try to figure out what kind of encryption is used on the file if possible.

Anonymous 2017-09-16 06:04:05 Post No.62456008
[Report]

Anonymous 2017-09-16 06:04:05 Post No.62456008 [Report]

So my question is, how can I see what was on this drive? im curious and want to learn.

Anonymous 2017-09-16 06:06:29 Post No.62456027
[Report]

Anonymous 2017-09-16 06:06:29 Post No.62456027 [Report]

Is it possible to rent time from AWS or similar that could bruteforce these passwords across a bunch of virtual machines?

Anonymous 2017-09-16 06:06:47 Post No.62456029
[Report] Image search: [Google]

Anonymous 2017-09-16 06:06:47 Post No.62456029 [Report]

File: testdisk.png (45KB, 895x358px) Image search: [Google]

45KB, 895x358px

>>62456001
THis is what pulls up on testdisk, im completely new to this so if this isnt what you are looking for let me know.

Anonymous 2017-09-16 06:08:24 Post No.62456038
[Report]

Anonymous 2017-09-16 06:08:24 Post No.62456038 [Report]

Select ms data and recover any files you can find. People usually have bad opsec and may have at some point stored the passphrase on the disk unencrypted..

Anonymous 2017-09-16 06:11:38 Post No.62456063
[Report] Image search: [Google]

Anonymous 2017-09-16 06:11:38 Post No.62456063 [Report]

File: testdiskMSdata.png (28KB, 897x358px) Image search: [Google]

28KB, 897x358px

>>62456038
this is running on terstdisk right now, is this what you meant?

Anonymous 2017-09-16 06:14:30 Post No.62456086
[Report]

Anonymous 2017-09-16 06:14:30 Post No.62456086 [Report]

>>62456063
I already helped you more than I should have.

Anonymous 2017-09-16 06:20:14 Post No.62456125
[Report]

Anonymous 2017-09-16 06:20:14 Post No.62456125 [Report]

>>62456086
Why? I figured it would be nice to have a thread about this to break up the iPhone threads, I could have just retard mode googled it but its more fun with the only people who talk to me

Anonymous 2017-09-16 07:37:49 Post No.62456696
[Report] Image search: [Google]

Anonymous 2017-09-16 07:37:49 Post No.62456696 [Report]

File: 1505012251280.jpg (97KB, 1280x720px) Image search: [Google]

97KB, 1280x720px

>>62455952
>taiwanese biking cartoons
bakuon is a good show
good blog op