Skip to content

Conversation

@holly-o
Copy link

@holly-o holly-o commented Jan 8, 2026

Add APFS sample - password is 'password'

@magnumripper
Copy link
Member

Thanks! Is this for fvde2john or what? We have encrypted APFS samples in the "Apple_DMG" directory (for dmg2john) but this seems to be something else.

Perhaps also add a password.txt and/or README.txt in the same directory, stating the password and other good-to-know info such as how to use it (including which something2john converter to use, if any), how the sample was made, on what, versions, whatever might be good to know in the future.

@holly-o
Copy link
Author

holly-o commented Jan 13, 2026

This is an APFS container - I don't think there are any APFS files within Apple DMG but I can move this there? If APFS is even supported as a hash format?

@magnumripper
Copy link
Member

I thought I saw some APFS under Apple_DMG but now I can't find it, lol. And dmg2john doesn't recognize this file so you are probably right. So this is some other type of encryption?

Anyway we might want to put this under Apple_APFS directory though, easier to find among the other directories as we have existing Apple_DMG and Apple_Keychain directories.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants