dd if=/dev/sdb of=bitlocker_image.dd bs=512 status=progress bitlocker2john.exe bitlocker_image.dd > hash.txt Sample output (hash.txt):
# Extract hash from image bitlocker2john.exe encrypted.dd > hash.txt john --format=bitlocker hash.txt Crack with hashcat (after converting) hashcat -m 22100 hash.txt rockyou.txt bitlocker2john.exe
For (mode 22100), you must convert: