Just opened (mounted) the file, you can get the password from somewhere else (remember that this is a forensics challenge… what kind of things can you extract?) . Otherwise I’m lost, can’t figure how to decrypt the rest of the stuff …
@blu3g3n3 You have the encryption algorithm that was used, and the keys for it. You can do the decryption. But before you do, consider if the data you have is encoded in any form or not.
hello i have a question about TrueSecrets challenge I reach a place that i have to find the password of the .tc file but the bruete forcing is not a choice in many writeups they used to grep from a specific file and the just catch the passphrase with no explanition and i dont know how to research about this i do not know what is it
Thanks a lot @RedSh4dow , I finally solved it a week ago or so
1 Like
@RazzHacks You can consider the following:
You have a memory dump, hence anything that happened recently related to any process is available in the memory image. Consider how you can extract from this meomry image anything that can be a passphrase or password.
Can i talk to someone about this challenge?
i have the file and the passphrase, but when i am trying to do the work with the application i get invalid passphras…
Hi
Can you help me, your Discord nickname is not up to date.
I know how to solve this problem, but I have a certain problem with volatility
For some reason it writes that the truecryptsummary module cannot be used.
Maybe someone knows how to fix this or other ways to solve the problem 
Thanks.