I mistyped the password for a temporary persistent storage volume I made, having misplaced my normal Tails drive.
I have attempted to follow OPs instructions from here: https://www.reddit.com/r/tails/comments/ig0aoi/manual_upgrade_of_tails_deleted_persistent_volume/?utm_source=share&utm_medium=ios_app&utm_name=ioscss&utm_content=2&utm_term=1 For step 1, hexdump takes an about 4m to spit out, well, nothing. A numeric offset value is needed to input into the losetup command in step 2. I’ve tried using the starting sector of Persistent partition, and ending sector of Tails FS partition, as offset value in step 2, but the loop device setup is not recognized by cryptsetup as a valid LUKS device. When booting up Tails on the drive in question, after 1st attempt at inputting password it says (paraphrased:) can’t unlock, see error log for details - I couldn’t find during cursory search. So looks like tinkering with the volume on testdisk and stuff has messed with it. Happily, before any tinkering, in Gnome Disks utility I performed a backup to another drive of the encrypted partition (ie ‘Create disk image…’. Note that I did not do so for the entire 16gb drive.
Now, on a 3rd drive I have Kali live image. Thing is I’m a fish out of water when it comes to using tools like hashcat.
My question is: 1) how do I get the disk (partition) image backup to be hashcat-ready (..do I just do ‘Restore disk image…’ on a 4th drive?), and 2) what would the hashcat command need to look like when I know what the password should’ve been?
