MBP encrypted disk, disk password is unknown.


Rendering Error in layout Widget/Social: Call to a member function exists() on null. Please enable debug mode for more information.
More
7 years 3 months ago #6033 by reverendalc
Single user mode is a command shell much like terminal, however terminal is a command shell inside a booted graphical user interface.

Disk0 is the disk to mount

Please Log in or Create an account to join the conversation.

More
7 years 3 months ago #6034 by reverendalc
Going back and rereading our banter, when I suggested manually mounting disk0s1, you posted the output "disk1s1 the device is write locked"

I hadn't noticed at the time.

In either single user or terminal from recovery, try:
mkdir /volumes/mnt1
mkdir /volumes/mnt2
mkdir /volumes/mnt3
mount_hfs /dev/disk0s1 /volumes/mnt1
mount_hfs /dev/disk0s2 /volumes/mnt2
mount_hfs /dev/disk0s3 /volumes/mnt3

Let me know which if any commands work

Please Log in or Create an account to join the conversation.

  • saddad
  • saddad's Avatar Topic Author
  • Offline
  • Script Kiddy
  • Script Kiddy
  • we are given today and never promised tomorrow
More
7 years 3 months ago #6037 by saddad
mkdir all 3 entered without issue

this returned from mount disk 0s1 and 0s2,
mount_hfs: error on mount(): error = -1
mount_hfs: Invalid argument

However mount disk0s3 worked,
mount_hfs /dev/disk0s3 /volumes/mnt3
-bash-3.2#

Freedom

Please Log in or Create an account to join the conversation.

More
7 years 3 months ago #6042 by reverendalc

Please Log in or Create an account to join the conversation.

  • saddad
  • saddad's Avatar Topic Author
  • Offline
  • Script Kiddy
  • Script Kiddy
  • we are given today and never promised tomorrow
More
7 years 3 months ago #6053 by saddad
cd /dev/mnt3: no such file or directory

so i tried
cd /volumes/mnt3
ls
.Trashes .metadata_never_index com.apple.boot.p
.fseventsd System com.apple.recovery.boot

Looks like a list of directories

Freedom

Please Log in or Create an account to join the conversation.

More
7 years 3 months ago - 7 years 3 months ago #6054 by reverendalc
Oops I was tired when I wrote that. You were right with the command good job.

That's the recovery partition. S1 will be the EFI partition. S2 will be the target.

Can you go back to the disk utility (from cmd-r boot) and select the "OS" entry beneath applessd and post a screenshot?
Last edit: 7 years 3 months ago by reverendalc.

Please Log in or Create an account to join the conversation.

  • saddad
  • saddad's Avatar Topic Author
  • Offline
  • Script Kiddy
  • Script Kiddy
  • we are given today and never promised tomorrow
More
7 years 3 months ago #6086 by saddad
OS with info


Freedom
Attachments:

Please Log in or Create an account to join the conversation.

More
7 years 3 months ago #6088 by reverendalc
Sadness.

Our remaining options are:
Recover via iCloud
Brute force attack

Do you have access to his email account?

Please Log in or Create an account to join the conversation.

  • saddad
  • saddad's Avatar Topic Author
  • Offline
  • Script Kiddy
  • Script Kiddy
  • we are given today and never promised tomorrow
More
7 years 3 months ago #6089 by saddad
Yes. access to email and icloud account.
The firmware password is off as well
i can access safari from utilities

Freedom

Please Log in or Create an account to join the conversation.

More
7 years 3 months ago #6091 by reverendalc
Do an inbox search for "recovery" or "FileVault" or just plain "Apple" and sift through the results for a recovery key.

Also, sign into iCloud.com and poke around there for FileVault recovery?

It's an undocumented feature so I don't know much about it

Please Log in or Create an account to join the conversation.

Who's Online

We have 239 guests and no members online

N00BZ

  • ljamal
  • ljamal74
  • mikeg2atest
  • ducchinhbui
  • anjarezt

Cookies