Passware Kit 2022 v1 supports Windows 11 and macOS Monterey, Acronis backups, LUKS2 decryption via memory analysis and LUKS2 AES-CBC encryption
What’s new in Passware Kit 2022 v1:
Passware Kit 2022 v1 fully supports the latest OS releases: Windows 11 and macOS Monterey, including BitLocker and APFS decryption, extraction of SAM passwords, and password recovery for Keychain files.
We are continually expanding the range of file types and applications that Passware Kit supports. The new version introduces GPU-accelerated password recovery for Acronis backups and support for LUKS2 disks protected with AES-CBC encryption.
We have also redesigned the “Known Passwords” attack to support multiple passwords without the need to create a custom dictionary.
New versions of Passware dictionaries are available that have been updated with passwords from the recent password leaks and Password Exchange database.
In addition, we improved the usability of batch mode for files and disks and made the Hardware benchmark tool available in the free Demo version of Passware Kit Forensic.
Support for Windows 11
Passware Kit 2022 v1 supports the decryption and password recovery options for the Windows 11 systems: BitLocker XTS-AES volumes, Windows users, SAM database, Windows hashes, and websites.
Support for macOS Monterey
All of the features of the Mac version of the Passware Kit are now fully supported for macOS Monterey, including but not limited to Keychain data extraction, password recovery for FileVault2/APFS and Apple DMG, user password extraction from a memory image, and APFS unlock for Macs with Apple T2.
GPU-accelerated password recovery for Acronis backup
The new Passware Kit recovers passwords for Acronis backups – *.TIB files. The recovery can be accelerated on NVIDIA and AMD GPUs, reaching speeds greater than 14,200 passwords per second on an AMD 6900 XT.
List of passwords supported by the Known Passwords attack
Passware Kit now allows users to leverage the Known Passwords attack by specifying multiple passwords but without creating a custom dictionary.
These passwords can also be modified with the regular Passware Kit modifiers, such as “Change casing,” “Change chars order,” and “Substitute chars.”
Instant LUKS2 decryption via memory analysis
LUKS2 volumes can now be instantly decrypted whenever the corresponding memory image containing an encryption key is available.
We have also added support for LUKS2 disks protected with the AES-CBC encryption algorithm.
Batch mode improvements
In batch mode, files can now be added to specific groups by clicking the [+] sign of the group.
When working with disks with multiple partitions in batch mode, Passware Kit now allows users to specify one or more partitions for processing. The software can apply specific password recovery and decryption methods to different partitions within the same disk. The partition selection in batch mode is supported for TrueCrypt, VeraCrypt, Bitlocker, FileVault, and LUKS images.
With the new resizable columns, the process of setting up the batch password recovery has become even easier to complete and customize.
New Passware dictionaries
New versions of our proprietary dictionaries, updated with passwords from the recent password leaks and Password Exchange database, are now available: Passware Dictionary 2022 Large (10 bn passwords) and Passware Dictionary 2022 Small (550,000+ passwords).
The dictionaries are available for download to Passware Kit Forensic and Business customers from their Passware Account.
Hardware Benchmark added to the Demo version
The “Hardware Benchmark” option is now available in the “Tools” menu of the free Demo versions of Passware Kit Business and Forensic.
With this option, users can assess their hardware performance on typical password recovery tasks and receive the reports for free!
Shutdown and Reboot options in the Bootable Memory Imager
After completing the memory acquisition process, Passware Bootable Memory Imager now offers to shut down or reboot the target computer. This feature works on Windows, macOS, and Linux systems.