Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sat, 7 Apr 2012 17:32:12 +0530
From: Dhiru Kholia <dhiru.kholia@...il.com>
To: john-dev@...ts.openwall.com
Subject: Re: Mac OS X keychains and FileVault (was: GSoC non-hash
 office documents)

On Sun, Apr 1, 2012 at 11:34 AM, Solar Designer <solar@...nwall.com> wrote:
> http://www.ucc.asn.au/~matt/src/ - extractkeychain-0.1.tar.gz

Does this work with current version of OS X key-chains?  If yes, this
will be the most promising option for developing a JtR plug-in.

> http://www.georgestarcher.com/?page_id=256 - crowbarDMG, crowbarKC

It looks like this tool too uses OS X internal calls (people have
complained about its speed).

> There's also my own tiny keychain cracker that runs on Mac only and uses
> SecKeychainUnlock() to test various passwords (about 200 c/s at 2.0 GHz,
> does not scale beyond 1 CPU core because of locking in the system).
> I did not release it.  I also have some related notes.  I can share this
> stuff with whoever works on implementing this for JtR.

I also found a new tool : osx-keychain-brute
(http://mirror.transact.net.au/pub/sourceforge/p/project/po/potaru-pentest/,
no sources though). Looks like it calls SecKeychainUnlock function.
Claimed speed is 500 k/s.

-- 
Cheers,
Dhiru

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ