Penetration testing bY eXpl0i13r

While working on some assignments, I wanted to copy data from my friends TrueCrypt Volume which was encrypted with password and he forget password!!!! and that's my journey started towards TrueCrypt Hacking!

TrueCrypt is an open source program to create and mount virtual encrypted disks in Windows Vista/XP/2000 and Linux and OS X as well as Whole Disk Encryption on Windows. It provides two levels of plausible deniability (hidden values / no signatures to make a distinction from random data), on the fly encryption and supports AES, Serpent and Twofish. As of version 6.0 TrueCrypt now supports hidden Operating Systems under Windows only.

Favorite attack is Dictionary Based / Brute Force, for which there are multiple tools available for Linux as well as Windows.

Tools :

TrueCrack (Most Reliable Tool)
Unprotect.info
TCHead
TCBrute 2
Passware Passwod Recovery Kit Forensic (Commercial)
Hashcat/CudaHashcat

Also there are attacks for extracting Master Keys for TrueCrypt from Memory Dump.

TrueCrack

TrueCrack In Action with Dictionary Attack

Unprotect.info

Pure Brute Force attack with Digits :

TCHead

TCHead In Action with Dictionary Attack :

TCBrute 2

Specified Dictionary & TrueCrypt Encrypted file, but for some reason TCBrute seems unreliable as I was unable to crack password although it was present in dictionary, Visitors can cross check and comment.

Password not cracked, although it was present in mentioned dictionary file :

Passware Passwod Recovery Kit Forensic (Commercial)

First of all this is commercial tool, and can perform various known attacks agains TrueCrypt encrypted volume.