Not finding $SVS anywhere in the bin file,


Rendering Error in layout Widget/Social: Call to a member function exists() on null. Please enable debug mode for more information.
More
8 years 6 months ago #1298 by Jub2k3
Is there anything else I can look for in terms of password string location?

Please use Google Search..... It makes all our lives easier.

Please Log in or Create an account to join the conversation.

More
8 years 6 months ago #1309 by Jub2k3
Here is the dump if anyone would be so kind as to look it over.


File Attachment:

File Name: MacBookPro...51-2.zip
File Size:1,781 KB



Thanks for your time.

Please use Google Search..... It makes all our lives easier.
Attachments:

Please Log in or Create an account to join the conversation.

More
8 years 6 months ago #1310 by loadedlouie
i think the best person to help with this is ghost or token paul.. just wait they will respond to yor request almost for sure. :)

With my best regards..
The following user(s) said Thank You: Jub2k3

Please Log in or Create an account to join the conversation.

More
8 years 6 months ago #1313 by Jub2k3
Thanks for the input. Ill wait till they lend a hand.

Please use Google Search..... It makes all our lives easier.

Please Log in or Create an account to join the conversation.

More
8 years 6 months ago #1318 by thaGH05T
I have seen this same question on a few threads now from you :) I know you may be anxious but please just wait for the response..... which I gave on another post already.
The following user(s) said Thank You: Jub2k3

Please Log in or Create an account to join the conversation.

More
8 years 6 months ago - 8 years 6 months ago #1321 by token.paul
Core Duo firmwares doesn't have $SVS area at all. EFI password stored as regular EFI variable in the NVRAM.
The NVRAM data always written after bios section and for many Core Duo firmwares from Apple NVRAM section begins at offset 0x80000. Usually I look this area by eyes in hex-editor...
But may be better to search this: '730065006300750072006900740079002D00700061007300730077006F0072006400' It is heximal representation of the 'security-password' keyword.
Look at picture:


Light blue marked EFI variable itself. More dark blue is a 'security-password' keyword. Password hash marked red.

Attached file named 'decrypt.py' was made from efipw code ( code.google.com/p/efipw/ ). Launch it with password hash as command-line argument, like this:
./decrypt.py 989C9A9D9D93
HASH:  989C9A9D9D93
PASS:  260779
And you'll see the password.


File Attachment:

File Name: decrypt.py.zip
File Size:1 KB
Attachments:
Last edit: 8 years 6 months ago by token.paul. Reason: forgot about ziping...
The following user(s) said Thank You: Jub2k3, lolito, ujjalsheikh, bilel

Please Log in or Create an account to join the conversation.

More
8 years 2 months ago #2210 by Itechandrepairs
So if you delete that section, will that remove the password without causing an error?

Please Log in or Create an account to join the conversation.

More
8 years 2 months ago #2211 by Itechandrepairs
When trying to decrypt 9DCFD29F DF getting HASH: 9DCFD29F
PASS: 7ex5. But this is not a password. Thinking about replacing all symbols to FFFFFF. Does anyone know if it helps? Also where does the password begins on this line?
Attachments:

Please Log in or Create an account to join the conversation.

More
8 years 2 months ago #2212 by Itechandrepairs

Itechandrepairs wrote: When trying to decrypt 9DCFD29F DF getting HASH: 9DCFD29F
PASS: 7ex5. But this is not a password. Thinking about replacing all symbols to FFFFFF. Does anyone know if it helps? Also where does the password begins on this line?


can anyone help me please?

Please Log in or Create an account to join the conversation.

More
8 years 2 months ago #2224 by thaGH05T
Can you upload your binary so I can analyze it please?

Please Log in or Create an account to join the conversation.

More
8 years 2 months ago #2225 by thaGH05T
Ok I found it by reading your screenshot "h7ex5uhl" You should have followed my tutorial a bit better ;) If it is hard to understand please let me know where you were confused and i will try and clean it up a bit for other users.
The following user(s) said Thank You: bilel

Please Log in or Create an account to join the conversation.

More
7 years 11 months ago #2940 by Jan__Oden
Hello, i have some issues with it, i first time in my life do that and i already desoler chip from Mobo and now i make two EFI dump back ups, can you please help delete password from my .bin file ?

Please Log in or Create an account to join the conversation.

More
7 years 11 months ago #2941 by thaGH05T
Are you hijacking a thread Jan__Oden? :) regardless, you have not provided a bin file yet so I still cannot help.

Please Log in or Create an account to join the conversation.

More
7 years 11 months ago #2942 by Jan__Oden
sorry when i make that post i try to attach file but he not attach.

Please Log in or Create an account to join the conversation.

More
7 years 11 months ago #2943 by Jan__Oden
sorry i dont know why but i can attach file to my massege, he just ask me every time captcha again and again.

Please Log in or Create an account to join the conversation.

More
7 years 11 months ago #2944 by zenelli

Jan__Oden wrote: sorry i dont know why but i can attach file to my massege, he just ask me every time captcha again and again.


pm me the bin file i will help you

Please Log in or Create an account to join the conversation.

More
7 years 11 months ago #2945 by CygnusX1

Jan__Oden wrote: sorry i dont know why but i can attach file to my massege, he just ask me every time captcha again and again.


You need to put it in a "zip" format for it to attach.

If I helped you buy me a latte!

Please Log in or Create an account to join the conversation.

More
4 years 1 week ago #11923 by bilel
Hi how are you please the sm problem i don't have $svs found can you help me
Attachments:

Please Log in or Create an account to join the conversation.

More
3 years 6 months ago #12259 by ak8607
hi, i really have no idea how this sit works so sorry if ive done something wrong here but i really need help with this file attached, i searched everywhere and keep ending up here but just dont understand where im looking for the password. thanks 
Attachments:

Please Log in or Create an account to join the conversation.

  • .::iRizwan::.
  • .::iRizwan::.'s Avatar
  • Offline
  • Haxor Guru
  • Haxor Guru
  • One Machine can do the work of 50 ordinary men, No Machine can do the work of 1 extraordinary man
More
3 years 6 months ago #12261 by .::iRizwan::.

ak8607 wrote: hi, i really have no idea how this sit works so sorry if ive done something wrong here but i really need help with this file attached, i searched everywhere and keep ending up here but just dont understand where im looking for the password. thanks 


The password is "newlok"

if i helped you Buy me a Coffee

Please Log in or Create an account to join the conversation.

Moderators: token.paul

Who's Online

We have 646 guests and no members online

N00BZ

  • ljamal
  • ljamal74
  • mikeg2atest
  • ducchinhbui
  • anjarezt

Cookies