bruteforce-luks

NAME

bruteforce-luks - try to find the password of a LUKS volume

SYNOPSIS

bruteforce-luks [options] <path to LUKS volume>

DESCRIPTION

The purpose of this program is to try to find the password of a LUKS encrypted volume. It can be used in two ways: The program can use several threads (the number of threads can be specified with the -t command line option). Sending a USR1 signal to a running bruteforce-luks process makes it print progress info to standard error and continue.

OPTIONS

-b <string>

Beginning of the password.
Default: ""
    

-e <string>

End of the password.
Default: ""
    

-f <file>

Read the passwords from a file instead of generating them.
    

-h

Show help and quit.
    

-l <length>

Minimum password length (beginning and end included).
Default: 1
    

-m <length>

Maximum password length (beginning and end included).
Default: 8
    

-s <string>

Password character set.
Default: "0123456789ABCDEFGHIJKLMNOPQRSTU
          VWXYZabcdefghijklmnopqrstuvwxyz"
    

-t <n>

Number of threads to use.
Default: 1
    

-v <n>

Print progress info every n seconds.
    

-w <file>

Restore the state of a previous session if the file exists,
then write the state to the file regularly (~ every minute).
    

EXAMPLES

Try to find the password of a LUKS encrypted volume using 4 threads, trying only passwords with 5 characters:

    bruteforce-luks -t 4 -l 5 -m 5 /dev/sdb1

Try to find the password of a LUKS encrypted volume using 8 threads, trying only passwords with 5 to 10 characters beginning with "W4l" and ending with "z":

    bruteforce-luks -t 8 -l 5 -m 10 -b "W4l" -e "z" /dev/sda2

Try to find the password of a LUKS encrypted volume using 8 threads, trying only passwords with 10 characters using the character set "P情8ŭ":

    bruteforce-luks -t 8 -l 10 -m 10 -s "P情8ŭ" /dev/sdc3

Try to find the password of a LUKS encrypted volume using 6 threads, trying the passwords contained in a dictionary file:

    bruteforce-luks -t 6 -f dictionary.txt /dev/sdd1

Instead of passing a block device to the program, you can copy the beginning of the LUKS volume to a file and pass this file to the program:

    sudo dd if=/dev/sda1 of=/tmp/luks-header bs=1M count=10
    bruteforce-luks -t 4 -l 5 -m 5 /tmp/luks-header

Print progress info:

    pkill -USR1 -f bruteforce-luks

Print progress info every 30 seconds:

    bruteforce-luks -t 6 -f dictionary.txt -v 30 /dev/sdd1

Save/restore state between sessions:

    bruteforce-luks -t 6 -f dictionary.txt -w state.txt /dev/sdd1
      (Let the program run for a few minutes and stop it)
    bruteforce-luks -t 6 -w state.txt /dev/sdd1