资 源 简 介
Brief Description
TCDiscover is a python script that uses entropy calculations to find possible Truecrypt/encrypted containers on a .DD harddrive image.
The script will output the sector offset and the sector length to easily carve out the suspected container with a tool like dd.
We are fully aware that it is theoretically impossible to prove that a block of random-looking data is or is not a Truecrypt volume, short of decrypting it with the correct password. Our goal is to identify block sections that present reasonable suspicion of being Truecrypt containers by finding contiguous block runs of data where each block is over a certain entropy calculation.
For more information, please see: https://secure.wikimedia.org/wikipedia/en/wiki/TrueCrypt#IdentifyingTrueCryptvolumes
Usage:
```
Usage: ./tcdiscover.py -i
Usage: ./tcdiscover.py -d
optional flags:
-e
