What’s new in Passware Kit 2021 v3:
In 2020, we announced a Beta version of Passware Kit Forensic for Mac. Thanks to the feedback we received from our beta testers, we were able to resolve stability, performance, and compatibility issues. Now, we are proud to announce the release version of Passware Kit Forensic for Mac!
Both the Mac and Windows versions of Passware Kit 2021 v3 decrypt LUKS2 disks, recover passwords and extract data from Dashlane Desktop password manager, and work faster while handling jobs of 1,000+ files in batch mode. Passware Bootable Memory Imager adds support for older versions of UEFI – 1.x and acquires memory from a broader range of Windows, Mac, and Linux systems.
Passware Kit 2021 v3 improves extraction from Keychain, and allows users to add comments for password recovery attacks.
Passware Kit Forensic for Mac
We released the final version of Passware Kit Forensic for Mac! It supports the key features of the Windows version, including file password recovery, FDE decryption, batch file processing, distributed password recovery, etc.
On top of this, Passware Kit Forensic for Mac unlocks APFS disks on Mac computers with an Apple T2 chip and improves APFS decryption processes on other systems.
The Mac version is available to all Passware Kit Forensic customers with an active SMS subscription.
Decryption of LUKS2 disks
In addition to LUKS1 decryption that was previously released, Passware Kit 2021 v3 recovers passwords for and decrypts LUKS2 volumes. The recovery process can be accelerated with NVIDIA and AMD GPU, as well as distributed computing.
Password recovery for Dashlane Desktop
Passware Kit extends the list of supported password managers by introducing password recovery for Dashlane Desktop. It recovers a Master password at speeds of up to 21,000 p/sec on an NVIDIA RTX 2080 Ti, and then extracts all the records from the Dashlane database.
Batch mode: improved performance for 1,000+ files
Passware Kit 2021 v3 improves batch mode performance for jobs that have over 1,000 files. This version handles customized settings, groups of files, timeouts, and reports much faster for large cases.
Support for UEFI 1.x by Passware Bootable Memory Imager
Passware Bootable Memory Imager runs from a bootable USB drive and acquires memory images of Windows, Linux, and Mac computers. The updated imager adds support for older versions of UEFI – 1.x and now acquires memory from a broader range of systems.
Passware Rainbow Tables for Windows
We now provide a set of rainbow tables designed for immediate recovery of Windows user passwords from NTLM hashes – Passware Rainbow Tables for Windows. The tables are 3.6 TB in RTI2 format and are shipped on a USB HDD drive.
The recovery of Windows passwords is performed locally within minutes by either Passware Kit Forensic or Passware Kit Business using the Rainbow Tables attack.
Keychain extraction improvements
For macOS Big Sur systems without an Apple T2 chip, Passware Kit 2021 v3 now extracts data from the Local Items Keychain after a successful password recovery. The extracted data includes a decrypted-keychain.plist file, which can be used to unlock APFS disks instantly on systems that share the same iCloud account, regardless of a T2 chip!
We have also improved the Keychain decryption UI that now offers three options: Login Keychain file, System Keychain, and Local Items Keychain. With the new navigation, it is now easier to understand which options are applicable in any particular case.
Passware Kit 2021 v3 allows users to add comments and descriptions for password recovery attacks. These comments can be saved while exporting the attacks. Comments can be used to describe the types of passwords that are covered by a particular attack, which is especially helpful when working with complex password recovery settings.
We have also updated the “Password Managers” section of the Passware Kit and rearranged the Keychain decryption options.