Some1 got the vdi enctyption password?

stuck on cracking the vdi pw, getting token length error, should it start as $vbox$0$540000..?

edit: nvm got it with 27600

You know what guys, I will make sure I will never use VirtualBox.
Does not understand easily if an image is encrypted WITH ITS OWN method.
When you want to remove encryption, sometimes it does, sometimes "Could not prepare disk images for encryption (VERR_VD_READ_OUT_OF_RANGE): (VERR_VD_READ_OUT_OF_RANGE)."
I wanted to remove the encryption on the disk with the VALID password and this error :)

And yeah, it asks for the password when you want to open it, and the password is correct.
And first time I released the encryption to continue, and it messed up again. Doing it over again...

This is the most shitty box I ever dealt with because of Virtualbox.
you can extract .vdi files' content with 7zip and it's .img inside. But it's corrupted because of passwd stuff.
So, you can't simply mount .img on linux/unix as usual.

escalation from lexi to john

explore mysql

select * from wp_pms_passwords;
SELECT * FROM wp_options where option_name='pms_encrypt_key';

so we have salt , key , algorithm (from encryption.php)

tweak the function to execute it locally and get john's ssh private key
and you're john

Hate bruteforce based boxes. ill wait till someone post vdi pass =)

(August 7, 2022, 07:41 PM)vexxxi Wrote: stuck on cracking the vdi pw, getting token length error, should it start as $vbox$0$540000..?

edit: nvm got it with 27600

https://github.com/axcheron/pyvboxdie-cracker.git

use this repo on "2019-08-01.vbox" file...

  :D

(August 7, 2022, 08:22 PM)gary Wrote:

(August 7, 2022, 07:41 PM)vexxxi Wrote: stuck on cracking the vdi pw, getting token length error, should it start as $vbox$0$540000..?

edit: nvm got it with 27600

https://github.com/axcheron/pyvboxdie-cracker.git

use this repo on "2019-08-01.vbox" file...

  :D

and use rockyou.txt so your nightmare can start...

(August 7, 2022, 08:24 PM)farkow Wrote:

(August 7, 2022, 08:22 PM)gary Wrote:

(August 7, 2022, 07:41 PM)vexxxi Wrote: stuck on cracking the vdi pw, getting token length error, should it start as $vbox$0$540000..?

edit: nvm got it with 27600

https://github.com/axcheron/pyvboxdie-cracker.git

use this repo on "2019-08-01.vbox" file...

  :D

and use rockyou.txt so your nightmare can start...

use wordlist that come from repo....

(August 7, 2022, 06:48 PM)vexxxi Wrote:

(August 7, 2022, 06:27 PM)m4rsh3ll Wrote:

(August 7, 2022, 04:16 PM)vexxxi Wrote: [align=justify]found
|       5 | SSH key       | [email protected] | <SSHKEY>

in sql db[/align]

Where did u find it? In what table?

its in wp_pms_passwords;
u can edit the entry for admin though and login to site

How do you do that? Do you have resources?