All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 5 posts ] 
Author Message
 Post subject: MacBook FileVault Password Question
PostPosted: September 28th, 2018, 17:05 
Offline
User avatar

Joined: June 11th, 2013, 17:01
Posts: 1710
Location: Phoenix, AZ USA
I have a MacBook Pro with FileVault set. Client was changing some setting and somehow the password was reset. Is there anyway to brute force one of these?

_________________
HDD, SSD, Flash and RAID Data Recovery
Founder of The Data Recovery Professionals Group


Top
 Profile  
 
 Post subject: Re: MacBook FileVault Password Question
PostPosted: September 29th, 2018, 2:49 
Offline
User avatar

Joined: January 28th, 2009, 10:54
Posts: 3452
Location: Greece
I'm pretty sure I 've done this, but don't remember how. You need to log in to Mac console. I couldn't recover the structure but the raw recovery was 100%.

Please drop me a PM to remind me and I'll take a look on Monday if I find my notes and let you know.

_________________
http://www.northwind.gr
SandForce SSD Recovery
Ransomware Reverse Engineering - NoMoreRansom! partners


Top
 Profile  
 
 Post subject: Re: MacBook FileVault Password Question
PostPosted: September 29th, 2018, 7:00 
Offline
User avatar

Joined: May 13th, 2010, 11:17
Posts: 2785
Location: Kuwait
ddrecovery wrote:
I have a MacBook Pro with FileVault set. Client was changing some setting and somehow the password was reset. Is there anyway to brute force one of these?


FileVault or OS password?

There was a Bug in FS (fixed of course) but you need to verify the OS ver.
To see make sure its updated or still vulnerable

_________________
Kuwait Data Recovery - UNIX GTC
The only reason for time is so that everything doesn't happen at once. By: Albert Einstein


Top
 Profile  
 
 Post subject: Re: MacBook FileVault Password Question
PostPosted: October 1st, 2018, 11:55 
Offline
User avatar

Joined: June 11th, 2013, 17:01
Posts: 1710
Location: Phoenix, AZ USA
northwind wrote:
I'm pretty sure I 've done this, but don't remember how. You need to log in to Mac console. I couldn't recover the structure but the raw recovery was 100%.

Please drop me a PM to remind me and I'll take a look on Monday if I find my notes and let you know.

Will do.

einstein9 wrote:
FileVault or OS password?

There was a Bug in FS (fixed of course) but you need to verify the OS ver.
To see make sure its updated or still vulnerable

Took the hard drive out of the Macbook and its encrypted, so the login password must be attached to FileVault.

_________________
HDD, SSD, Flash and RAID Data Recovery
Founder of The Data Recovery Professionals Group


Top
 Profile  
 
 Post subject: Re: MacBook FileVault Password Question
PostPosted: October 2nd, 2018, 4:22 
Offline
User avatar

Joined: May 13th, 2010, 11:17
Posts: 2785
Location: Kuwait
PM sent..

_________________
Kuwait Data Recovery - UNIX GTC
The only reason for time is so that everything doesn't happen at once. By: Albert Einstein


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 5 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 6 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group