Hack Forums
[BHCPU] How to setup Bitlocker now that truecrypt is insecure - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Keyloggers (https://hackforums.net/forumdisplay.php?fid=113)
+---- Thread: [BHCPU] How to setup Bitlocker now that truecrypt is insecure (/showthread.php?tid=4255275)

Pages: Pages 1 2


[BHCPU] How to setup Bitlocker now that truecrypt is insecure - -Hyperion - May 29, 2014

[Image: 9UztjKs.png]
Hey guys it's -Hyperion ✌

As you may or may not have heard Truecrypt has probably been compromised and it is no longer advisable from the creators even to use it. I will be walking you through today using another option that is built into windows called BitLocker and using it to encrypt the entire drive. Performance impact is minimal less then 5 MBps.

But first what is BitLocker? Bitlocker is a full drive disk encprytion program that uses the AES encryption algorithm in CBC mode with a 128-bit or 256-bit key, combined with the ''Elephant'' diffuser for additional disk encryption-specific security not provided by AES. In my opinion is it even more secure then truecrypt. You can read about it Here

To use BitLocker you will need:
  • Ultimate and Enterprise editions of Microsoft's Windows Vista

  • Windows 7 Ultimate

  • Windows 8 Pro or Enterprise

  • A computer with Trusted Platform Module (TPM), which is a special microchip in some newer computers that supports advanced security features. If your computer was manufactured with TPM version 1.2 or higher, BitLocker will store its key in the TPM.

  • A removable USB memory device, such as a USB flash drive. If your computer doesn’t have TPM version 1.2 or higher, BitLocker will store its key on the flash drive.


If you have one of the supported systems just go to the drive you want to encrypt and right click on it then hit turn on BitLocker.
Spoiler (Click to View)
Next choose a strong password that will be used to unlock the drive and click next.
Spoiler (Click to View)

You will then be prompted to save the recover key if you lose your password.

WARNING DO NOT LOSE THIS KEY OR STORE IT ON THE ENCRYPTED DRIVE
if you lose this recovery key after forgetting your password you will have to re-install windows and all data will be unrecoverable.
Spoiler (Click to View)
Then click that you want the drive to encrypt and let it run. That's it you're done. Now any time you want to access that drive you will have to enter your password.

If your computer does not have TPM you can still enable and use Bitlocker. To keep this tutorial short I will direct you Here which is an excellent guide on enabling Bitlocker on a system without TPM.



* - King Cin - May 29, 2014

(May 29, 2014 06:47 AM)-Hyperion Wrote:  Hey guys it's -Hyperion ✌

Orly?

Nice guide though. Nice of you to write it up for the people inexperienced in this field.


* - Aura - May 29, 2014

This feg is using my signature introduction but modified 😟
Add more images and fix that broken MyBB code.



* - -Hyperion - May 29, 2014

(May 29, 2014 06:51 AM)Aurа Wrote:  This feg is using my signature introduction but modified 😟
Add more images and fix that broken MyBB code.

learn from the best steal like the rest eh :P


* - еlixir - May 29, 2014

Why would we use bitlocker? It's like using Internet Explorer as a secure browser.


* - King Cin - May 29, 2014

(May 29, 2014 06:55 AM)Dr. Caspers Wrote:  Why would we use bitlocker? It's like using Internet Explorer as a secure browser.

Internet Explorer was the most secure browser on Windows 8 not so long ago, lol.


* - Aura - May 29, 2014

(May 29, 2014 06:55 AM)Unknown † Wrote:  Internet Explorer was the most secure browser on Windows 8 not so long ago, lol.

This, lol.
Also, people seems to forget that IE is the most used browser in compagnies/entreprises running Microsoft technologies, lol.


* - -Hyperion - May 29, 2014

(May 29, 2014 06:55 AM)Dr. Caspers Wrote:  Why would we use bitlocker? It's like using Internet Explorer as a secure browser.

Because I would rather use BitLocker then some shitty 3rd party app that someone made that not been tested or could be from the NSA. Look what happened to Truecrypt now.


* - immortalwon - May 29, 2014

(May 29, 2014 07:07 AM)-Hyperion Wrote:  Because I would rather use BitLocker then some shitty 3rd party app that someone made that not been tested or could be from the NSA. Look what happened to Truecrypt now.

And you think microsoft bitlocker isnt sponsored by the NSA? LOL


* - -Hyperion - May 29, 2014

(May 29, 2014 07:08 AM)immortalwon Wrote:  And you think microsoft bitlocker isnt sponsored by the NSA? LOL

Are you under the impression they do not already have everything? BitLocker will keep unauthorized users from accessing the data and as far as we know law enforcement to. Truecrypt is now up for grabs so why use it? Microsoft has already said several agencies have requested a BD and been turned down. I would like to believe we can have some trust in them.


* - еlixir - May 29, 2014

(May 29, 2014 07:03 AM)Aurа Wrote:  This, lol.
Also, people seems to forget that IE is the most used browser in compagnies/entreprises running Microsoft technologies, lol.

When companies use software they purchased, it leaves a paper trail so if something goes wrong, they can yell at them. If companies use free and open-source software then it is always the IT's fault. I prefer open-source over closed source for security any day.


* - zombiehacker - May 29, 2014

I wouldn't trust bitlocker with anything since it's made by microsoft.


* - -Hyperion - May 29, 2014

(May 29, 2014 07:19 AM)zombiehacker Wrote:  I wouldn't trust bitlocker with anything since it's made by microsoft.

Shouldn't you be in the linux section then 🎉


* - Aura - May 29, 2014

(May 29, 2014 07:18 AM)Dr. Caspers Wrote:  When companies use software they purchased, it leaves a paper trail so if something goes wrong, they can yell at them. If companies use free and open-source software then it is always the IT's fault. I prefer open-source over closed source for security any day.

Wrong. It's always the IT Department's fault, no matter what. Trust me, I get shit at everyday for things that aren't even under my control.


* - еlixir - May 29, 2014

(May 29, 2014 08:28 AM)Aurа Wrote:  Wrong. It's always the IT Department's fault, no matter what. Trust me, I get shit at everyday for things that aren't even under my control.

Show them the paper trail. Or check your logs to find the blame.