sandisk secureaccess password help

[usernamedguy1]

Hi all

I have got sandisk secureaccess v3.02 flash drive where i stored some data, there might be bitcoins inside and long time already i have failed to remember password.. v3.02 has vulnerability, if anyone is skilled to get in, let me know and i will be willing to share found things.

Its from 2017, the file.

[JeromeTash]

Some Bitcoins inside?

Are you trying to say you stored some wallet files... maybe seed phrase backups inside?

Do you even have part of the password you remember?

I read this

Critical:
- The SanDisk SecureAcces Encryption program is a 128-bit AES encryption.
- If the password is forgotten, the information stored on the flash drive cannot be retrieved.
- There is no "forgot password" option to reset the password.
- If the password cannot be remembered, with or without the password hint available, the files on the drive are not accessible.

[usernamedguy1]

Wallet logins inside possibly.

Secureaccess v3.02 can be bruteforced.

I have tryed with passware kit but i dont have full version to gain full power.

You gotta know how, bcs i dont.

I got possible passwords but they dont work

[RGBTC]

I have tryed with passware kit but i dont have full version to gain full power.

Have you considered alternatives like Hashcat? It is free and open-source. Here are some resources you can check out:
https://hashcat.net/forum/post-24532.html
https://github.com/hashcat/hashcat/issues/3467

I have no experience using this specific device for brute-forcing. If possible, only run it on backed-up files.
Proceed at your own risk.

[ABCbits]

Since you posted this thread on services section, you probably should mention some things in advance such as
1. What is the amount of money, amount of Bitcoin or percentage you're willing to give on successful brute-force.
2. What would happen if brute-force success, but it turns out the storage drive doesn't contain any Bitcoin wallet, recovery words or private key?

I have no experience using this specific device for brute-forcing. If possible, only run it on backed-up files.

In this case, i would also suggest to make raw copy of whole flash drive, since who knows how the encryption actually works. It can be done with software such as "HDD Raw Copy Tool" on Windows.

[DPHOR]

Hi all

I have got sandisk secureaccess v3.02 flash drive where i stored some data, there might be bitcoins inside and long time already i have failed to remember password

Then I do not think this should be looked into because you are not really sure of what you are saying, it is more like guessing.
Whom do you think that would waste their time trying to unravel something that seems to have no head, since your statement doesn't have true facts. To me, You have to be sure so that you when someone is trying to dig into details they will be that sure of what they are doing.

[wapwapwendy]

Hi all

I have got sandisk secureaccess v3.02 flash drive where i stored some data, there might be bitcoins inside and long time already i have failed to remember password.. v3.02 has vulnerability, if anyone is skilled to get in, let me know and i will be willing to share found things.

Its from 2017, the file.

If the data is important, make a copy of the files before trying anything. You could check whether the vulnerability in that version has a documented recovery method. Be careful with anyone asking you to upload the files or share sensitive information, especially if there might be Bitcoin wallets inside.

[348Judah]

I have got sandisk secureaccess v3.02 flash drive where i stored some data, there might be bitcoins inside and long time already i have failed to remember password.. v3.02 has vulnerability, if anyone is skilled to get in, let me know and i will be willing to share found things.

Bitcoin is not in your wallet or SanDisk, it is rather on the blockchain, but incase your keys are stored on the SanDisk but you can't access it, it's a different case entirely.

As long as you cannot remember the password used, I'm afraid you may not be able to get access to the dat.file on it, I don't know why some people will not always adhere to safety practice to have an alternative means of keeping the seed phrase, because if anything should happen to the single one you have already, you may not have an alternative backup to how you could recover or get hold of your coins on the wallet.

[Multani Boy]

Have you considered alternatives like Hashcat? It is free and open-source.

FYI, Hashcat can handle ENCsecurity Datavault formats. Issue #3467, the link shared above, was closed because Hashcat has added support. Modes 29930 and 29940 are for different Datavault variants. So that link above is no longer an unresolved issue.

John the Ripper also supports this format. See encdatavault2john.py in the JtR repo, which will grab the hash or hashes from a SecureAccess/ENC vault, which can then be used with various JtR password recovery modes.

If you want to know more about how this works and how to brute-force this encryption, there is a technical presentation from 2021 here:

There is a chance you may want or need to use a product like Passware Kit 2024 v3, which added GPU-accelerated password cracking for SanDisk PrivateAccess, SecureAccess and ENC Vault. But again, since the above freeware and open-source products can do this, whether it would be worth paying for a product like this would depend on your situation, such as the passwords you're hoping to recover and the hardware you have available for recovery.


I got this information from these links.

https://hashcat.net/hashcat/
https://www.forensicfocus.com/news/decrypt-sandisk-usb-drives-with-passware-kit-2024-v3/
https://github.com/hashcat/hashcat/issues/3467