sandisk secureaccess password help

[usernamedguy1]

Hi all

I have got sandisk secureaccess v3.02 flash drive where i stored some data, there might be bitcoins inside and long time already i have failed to remember password.. v3.02 has vulnerability, if anyone is skilled to get in, let me know and i will be willing to share found things.

Its from 2017, the file.

[JeromeTash]

Some Bitcoins inside?

Are you trying to say you stored some wallet files... maybe seed phrase backups inside?

Do you even have part of the password you remember?

I read this

Critical:
- The SanDisk SecureAcces Encryption program is a 128-bit AES encryption.
- If the password is forgotten, the information stored on the flash drive cannot be retrieved.
- There is no "forgot password" option to reset the password.
- If the password cannot be remembered, with or without the password hint available, the files on the drive are not accessible.

[usernamedguy1]

Wallet logins inside possibly.

Secureaccess v3.02 can be bruteforced.

I have tryed with passware kit but i dont have full version to gain full power.

You gotta know how, bcs i dont.

I got possible passwords but they dont work

[RGBTC]

I have tryed with passware kit but i dont have full version to gain full power.

Have you considered alternatives like Hashcat? It is free and open-source. Here are some resources you can check out:
https://hashcat.net/forum/post-24532.html
https://github.com/hashcat/hashcat/issues/3467

I have no experience using this specific device for brute-forcing. If possible, only run it on backed-up files.
Proceed at your own risk.

[ABCbits]

Since you posted this thread on services section, you probably should mention some things in advance such as
1. What is the amount of money, amount of Bitcoin or percentage you're willing to give on successful brute-force.
2. What would happen if brute-force success, but it turns out the storage drive doesn't contain any Bitcoin wallet, recovery words or private key?

I have no experience using this specific device for brute-forcing. If possible, only run it on backed-up files.

In this case, i would also suggest to make raw copy of whole flash drive, since who knows how the encryption actually works. It can be done with software such as "HDD Raw Copy Tool" on Windows.

[DPHOR]

Hi all

I have got sandisk secureaccess v3.02 flash drive where i stored some data, there might be bitcoins inside and long time already i have failed to remember password

Then I do not think this should be looked into because you are not really sure of what you are saying, it is more like guessing.
Whom do you think that would waste their time trying to unravel something that seems to have no head, since your statement doesn't have true facts. To me, You have to be sure so that you when someone is trying to dig into details they will be that sure of what they are doing.

[wapwapwendy]

Hi all

I have got sandisk secureaccess v3.02 flash drive where i stored some data, there might be bitcoins inside and long time already i have failed to remember password.. v3.02 has vulnerability, if anyone is skilled to get in, let me know and i will be willing to share found things.

Its from 2017, the file.

If the data is important, make a copy of the files before trying anything. You could check whether the vulnerability in that version has a documented recovery method. Be careful with anyone asking you to upload the files or share sensitive information, especially if there might be Bitcoin wallets inside.

[348Judah]

I have got sandisk secureaccess v3.02 flash drive where i stored some data, there might be bitcoins inside and long time already i have failed to remember password.. v3.02 has vulnerability, if anyone is skilled to get in, let me know and i will be willing to share found things.

Bitcoin is not in your wallet or SanDisk, it is rather on the blockchain, but incase your keys are stored on the SanDisk but you can't access it, it's a different case entirely.

As long as you cannot remember the password used, I'm afraid you may not be able to get access to the dat.file on it, I don't know why some people will not always adhere to safety practice to have an alternative means of keeping the seed phrase, because if anything should happen to the single one you have already, you may not have an alternative backup to how you could recover or get hold of your coins on the wallet.

[Multani Boy]

Have you considered alternatives like Hashcat? It is free and open-source.

FYI, Hashcat can handle ENCsecurity Datavault formats. Issue #3467, the link shared above, was closed because Hashcat has added support. Modes 29930 and 29940 are for different Datavault variants. So that link above is no longer an unresolved issue.

John the Ripper also supports this format. See encdatavault2john.py in the JtR repo, which will grab the hash or hashes from a SecureAccess/ENC vault, which can then be used with various JtR password recovery modes.

If you want to know more about how this works and how to brute-force this encryption, there is a technical presentation from 2021 here:

There is a chance you may want or need to use a product like Passware Kit 2024 v3, which added GPU-accelerated password cracking for SanDisk PrivateAccess, SecureAccess and ENC Vault. But again, since the above freeware and open-source products can do this, whether it would be worth paying for a product like this would depend on your situation, such as the passwords you're hoping to recover and the hardware you have available for recovery.


I got this information from these links.

https://hashcat.net/hashcat/
https://www.forensicfocus.com/news/decrypt-sandisk-usb-drives-with-passware-kit-2024-v3/
https://github.com/hashcat/hashcat/issues/3467

[usernamedguy1]

i need a person who is able to do the job.. otherwise i would do it my self.. i did recover 5 years ago another .rar, and there was bitcoins inside.. all the files are my personal

[eternalgloom]

i need a person who is able to do the job.. otherwise i would do it my self.. i did recover 5 years ago another .rar, and there was bitcoins inside.. all the files are my personal

Even though SanDisk SecureAccess v3.02 has vulnerabilithy, bypassing AES 128 encryption is not possible.

Anyway, you yourself are saying, there might be bitcoin inside. Why would anyone legitimate waste their private tool, money and valuable time on an uncertain file! IDK
If someone does contact you, be 99% sure they will make off with your sensitive data.

Best of all, if you have any specific clue, you can create your custom wordlist and rule with Hashcat. As some people already said, try Hashcat with combination of passwords you used before. There will be no choice but to give up hope of getting your funds by handover file to any third party on this forum.

If you want to know more about how this works and how to brute-force this encryption, there is a technical presentation from 2021 here:

If his password long or complex then brute force attack using any typical laptop or desktop could take centuries to succeed.

[joniboini]

i need a person who is able to do the job.. otherwise i would do it my self.. i did recover 5 years ago another .rar, and there was bitcoins inside.. all the files are my personal

Make a thread on the services board with your terms then. Nobody is going to do it for free. Even the most popular Bitcoin recovery services requires your files afaik. I doubt anyone would agree with a term like "only paid if brute force is successful and there's Bitcoin inside" though. You'll probably have to pay some cost upfront so make sure you aren't dealing with some random people with no escrow/guarantee.

[RGBTC]

~

It feels like I’m getting a response from a robot or maybe that’s just my impression. Haha... thanks for the details, by the way.

i need a person who is able to do the job.. otherwise i would do it my self..

Try it yourself, follow the suggestions above until you eventually give up. Since you can’t even be sure whether it actually contains any BTC, you’d just be wasting your money if it turns out it doesn't. Generally speaking, recovery services charge a fee based on a percentage of the value being recovered.

Make a thread on the services board with your terms then.

If I remember correctly, this thread was originally in the Services.

[Multani Boy]

~

It feels like I’m getting a response from a robot or maybe that’s just my impression. Haha... thanks for the details, by the way.

Hahaha. You made my day.

Do not say things like that, it almost took me an hour to collect this data and respond to you.

[ABCbits]

i need a person who is able to do the job.. otherwise i would do it my self.. i did recover 5 years ago another .rar, and there was bitcoins inside.. all the files are my personal

Make a thread on the services board with your terms then. Nobody is going to do it for free.
--snip--

FYI, this thread originally posted on services board (https://bitlist.co/topic/5596288?sort_by=date_asc). But at some point, it's moved here (Bitcoin Discussion board). OP also seem to ignore my advice, so we can guess how serious is OP.