DOKK / manpages / debian 12 / bruteforce-luks / bruteforce-luks.1.en
BRUTEFORCE-LUKS(1) Bruteforce LUKS encrypted volume BRUTEFORCE-LUKS(1)

bruteforce-luks - try to find the password of a LUKS volume

bruteforce-luks [options] <path to LUKS volume>

The purpose of this program is to try to find the password of a LUKS encrypted volume.

It can be used in two ways:

• brute force attack: try all the possible passwords given a character set. It is especially useful if you know something about the password (i.e. you forgot a part of your password but still remember most of it). Finding the password of a volume without knowing anything about it would take way too much time (unless the password is really short and/or weak).

• dictionary attack: try all the passwords in a file.

The program can use several threads (the number of threads can be specified with the -t command line option).

Sending a USR1 signal to a running bruteforce-luks process makes it print progress info to standard error and continue.

Beginning of the password.
Default: ""
End of the password.
Default: ""
Read the passwords from a file instead of generating them.
Show help and quit.
Minimum password length (beginning and end included).
Default: 1
Maximum password length (beginning and end included).
Default: 8
Password character set.
Default: "0123456789ABCDEFGHIJKLMNOPQRSTU


          VWXYZabcdefghijklmnopqrstuvwxyz"
Number of threads to use.
Default: 1
Print progress info every n seconds.
Restore the state of a previous session if the file exists,
then write the state to the file regularly (~ every minute).

Try to find the password of a LUKS encrypted volume using 4 threads, trying only passwords with 5 characters:



    bruteforce-luks -t 4 -l 5 -m 5 /dev/sdb1

Try to find the password of a LUKS encrypted volume using 8 threads, trying only
  passwords with 5 to 10 characters beginning with "W4l" and ending
  with "z":





    bruteforce-luks -t 8 -l 5 -m 10 -b "W4l" -e "z" /dev/sda2



Try to find the password of a LUKS encrypted volume using 8 threads, trying only
  passwords with 10 characters using the character set
  "P情8ŭ":





    bruteforce-luks -t 8 -l 10 -m 10 -s "P情8ŭ" /dev/sdc3



Try to find the password of a LUKS encrypted volume using 6 threads, trying the
  passwords contained in a dictionary file:





    bruteforce-luks -t 6 -f dictionary.txt /dev/sdd1



Instead of passing a block device to the program, you can copy the beginning of
  the LUKS volume to a file and pass this file to the program:





    sudo dd if=/dev/sda1 of=/tmp/luks-header bs=1M count=10


    bruteforce-luks -t 4 -l 5 -m 5 /tmp/luks-header



Print progress info:





    pkill -USR1 -f bruteforce-luks



Print progress info every 30 seconds:





    bruteforce-luks -t 6 -f dictionary.txt -v 30 /dev/sdd1



Save/restore state between sessions:





    bruteforce-luks -t 6 -f dictionary.txt -w state.txt /dev/sdd1


      (Let the program run for a few minutes and stop it)


    bruteforce-luks -t 6 -w state.txt /dev/sdd1







  

    November 2019
    BRUTEFORCE-LUKS 1.4.0