Password recovery

[Jerome Lille]

Hi

I just realized that I've forgotten the password to unlock my laptop. I
haven't touched it since the beginning of the year. It has the same
password for disc encryption, root and main user. I'm pretty sure about
the 4 first characters and then there should be four more characters
that I can't remember.

Is there some tools on Fedora so that I could attach the disc from the
laptop to my desktop and give it the four characters I remember and the
tools would try to find remaining ones?

/Jerome

[Qiyu Yan]

Jerome Lille <jerome.lille(a)ownbay.net&gt; 于2020年12月15日周二 下午11:17写道：
>  Hi
>
>  I just realized that I've forgotten the password to unlock my laptop. I
>  haven't touched it since the beginning of the year. It has the same
>  password for disc encryption, root and main user. I'm pretty sure about
>  the 4 first characters and then there should be four more characters
>  that I can't remember.
>
>  Is there some tools on Fedora so that I could attach the disc from the
>  laptop to my desktop and give it the four characters I remember and the
>  tools would try to find remaining ones? 
You can't find your password, you can
only bruteforce your password,
try using a liveusb and a tool like
https://github.com/glv2/bruteforce-luks
>
> /Jerome
> _______________________________________________
> users mailing list -- users(a)lists.fedoraproject.org
> To unsubscribe send an email to users-leave(a)lists.fedoraproject.org
> Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
https://lists.fedoraproject.org/archives/list/[e-mail]

[Jerome Lille]

On Tue, 2020-12-15 at 23:32 +0800, Qiyu Yan wrote:
>  Jerome Lille <jerome.lille(a)ownbay.net&gt; 于2020年12月15日周二
> 下午11:17写道：
>  > Hi
>  > 
>  > I just realized that I've forgotten the password to unlock my
>  > laptop. I
>  > haven't touched it since the beginning of the year. It has the same
>  > password for disc encryption, root and main user. I'm pretty sure
>  > about
>  > the 4 first characters and then there should be four more
>  > characters
>  > that I can't remember.
>  > 
>  > Is there some tools on Fedora so that I could attach the disc from
>  > the
>  > laptop to my desktop and give it the four characters I remember and
>  > the
>  > tools would try to find remaining ones?
>  You can't find your password, you can only bruteforce your password,
>  try using a liveusb and a tool like
>  https://github.com/glv2/bruteforce-luks 
Thanks for the link.

I've got it now running. But I'm wondering if 1.5 password tries per
second is normal? I've given it several threads, but it doesn't seem to
make any difference. The disc is connected over USB.

/Jerome

[Łukasz Posadowski]

Tue, 15 Dec 2020 22:23:50 +0100
Jerome Lille <jerome.lille(a)ownbay.net&gt;:

>  I've got it now running. But I'm wondering if 1.5 password
> tries per
>  second is normal? I've given it several threads, but it doesn't seem
>  to make any difference. The disc is connected over USB. 
It could take around 10 years at this pace. You can dd that disk into a
file on a hard drive. You will have much faster read times. Be prepared
that brute force takes time, even on a very fast, 24-like core machine.

If you want to make it quick, You could find a promo code to Linode, od
Digital Ocean, rent 8 core VM with big disk and hope it will crack it
before money from the promotion code expires.

-- 
Łukasz Posadowski

[Jerome Lille]

On Thu, 2020-12-17 at 21:15 +0100, Łukasz Posadowski wrote:
>  Tue, 15 Dec 2020 22:23:50 +0100
>  Jerome Lille <jerome.lille(a)ownbay.net&gt;:
>  
>  > I've got it now running. But I'm wondering if 1.5 password tries
>  > per
>  > second is normal? I've given it several threads, but it doesn't
>  > seem
>  > to make any difference. The disc is connected over USB.
>  
>  It could take around 10 years at this pace. You can dd that disk into
>  a
>  file on a hard drive. You will have much faster read times. Be
>  prepared
>  that brute force takes time, even on a very fast, 24-like core
>  machine.
>  
>  If you want to make it quick, You could find a promo code to Linode,
>  od
>  Digital Ocean, rent 8 core VM with big disk and hope it will crack it
>  before money from the promotion code expires. 
Fortunately the character set for the missing last four characters were
quite small. So my desktop could brute force it in a day. 

I just thought it was strange that I couldn't do better than around 1.5
tries per second. Even though I moved the target disk image from usb to
a sata3 ssd on the desktop. And how many threads I configured didn't
seem to matter either.

/Jerome

[Tim]

On Fri, 2020-12-18 at 08:57 +0100, Jerome Lille wrote:
>  I just thought it was strange that I couldn't do better than
> around
>  1.5 tries per second. Even though I moved the target disk image from
>  usb to a sata3 ssd on the desktop. And how many threads I configured
>  didn't seem to matter either. 
What were you trying that many time (you mentioned disc encryption,
root and main user).  If you're trying to login, there could be
throttling to counter brute force attacks.  If you're trying
decryption, it could simply be the time to try decrypting it and
checking if it worked.

i.e. It's the probably the response time, rather than the attempts.
 
-- 
 
uname -rsvp
Linux 3.10.0-1160.6.1.el7.x86_64 #1 SMP Tue Nov 17 13:59:11 UTC 2020 x86_64
 
Boilerplate:  All unexpected mail to my mailbox is automatically deleted.
I will only get to see the messages that are posted to the mailing list.

[Jerome Lille]

On Fri, 2020-12-18 at 20:14 +1030, Tim via users wrote:
>  On Fri, 2020-12-18 at 08:57 +0100, Jerome Lille wrote:
>  > I just thought it was strange that I couldn't do better than around
>  > 1.5 tries per second. Even though I moved the target disk image
>  > from
>  > usb to a sata3 ssd on the desktop. And how many threads I
>  > configured
>  > didn't seem to matter either.
>  
>  What were you trying that many time (you mentioned disc encryption,
>  root and main user).  If you're trying to login, there could be
>  throttling to counter brute force attacks.  If you're trying
>  decryption, it could simply be the time to try decrypting it and
>  checking if it worked.
>  
>  i.e. It's the probably the response time, rather than the attempts. 
I was using this tool that was mentioned earlier in the conversation
https://github.com/glv2/bruteforce-luks

/Jerome