https://github.com/tethik/luks-remote-wipe

Prototyping remote wipe functionality for linux via LUKS
https://github.com/tethik/luks-remote-wipe

Last synced: 4 days ago
JSON representation

Prototyping remote wipe functionality for linux via LUKS

• Host: GitHub
• URL: https://github.com/tethik/luks-remote-wipe
• Owner: Tethik
• License: gpl-3.0
• Created: 2020-01-24T17:09:23.000Z (almost 5 years ago)
• Default Branch: master
• Last Pushed: 2024-08-14T10:31:22.000Z (3 months ago)
• Last Synced: 2024-10-11T08:26:48.641Z (27 days ago)
• Language: Go
• Homepage:
• Size: 16.6 KB
• Stars: 0
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# luks-remote-wipe

This program attempts to remove the keyslots used by Linux's CryptSetup disk encryption utility, effectively

leaving a disk encrypted with an unknown master key.

Use cases:

1. Stolen computers that somehow had disk encryption bypassed via e.g. weak passphrase or having been left unlocked.

2. Admins needing to remotely shut down online compromised computers e.g. from rogue employees or hacked.

🚨⚠️ Use with caution! This program will cause you to lose your data. Don't run this with sudo.

# Requirements

This program is currently only intended to run on LUKS-encrypted Linux setups.

# Dependencies

Requires libcryptsetup-dev to compile

```

$ sudo apt install libcryptsetup-dev

```

# Manual wipe of LUKS

```sh

cryptsetup luksDump /dev/nvme0n1p3 # see keyslots

cryptsetup -v luksKillSlot /dev/nvme0n1p3 1 # destroy key at slot 1, etc.

cryptsetup -v luksKillSlot /dev/nvme0n1p3 2

# ..

```