I lost my second password blockchain.com.

Code:

62 73 3a                                         bs:                <- signature

         2d e3 fb a5 e1 bc e7 71 e7 42 56 86 b3     -......q.BV..   <- iterated sha256 hash

09 70 a7 0b 6a 5c ac 1a ff 5a cb c9 e1 b3 bc a3  .p..j\...Z......

65 f4 7a                                         e.z

         72 8e 76 9e 4c 26 43 01 a0 b8 2d b2 5c     r.v.L&C...-.\   <- salt (used for the UUID conversation)

56 4c 5a                                         VLZ

         10 27 00 00                                .'..            <- iteration: 0x2710 = 10000

                     2c 17 63 ac                        ,.c.        <- crc32

Code:

#!/usr/bin/env perl



#

# Author: philsmd

# Date: February 2019

# License: public domain, donated to hashcat, credits go to philsmd and the hashcat project

#



use strict;

use warnings;



use Digest::SHA qw (sha256);

use MIME::Base64 qw (decode_base64);



# Example:

# YnM6LeP7peG853HnQlaGswlwpwtqXKwa/1rLyeGzvKNl9HpyjnaeTCZDAaC4LbJcVkxaECcAACwXY6w=:btcr-test-password

# my $hash_target = pack ("H*", "2de3fba5e1bce771e7425686b30970a70b6a5cac1aff5acbc9e1b3bca365f47a");

# my $salt = "728e769e-4c26-4301-a0b8-2db25c564c5a";

# my $iterations = 10000;



if (scalar (@ARGV) != 2)

{

  print "USAGE: $0 <base64 string> <dictionary>\n";



  exit (1);

}



my $base64_string  = $ARGV[0];

my $dict_file_name = $ARGV[1];



if (length ($base64_string) != 80)

{

  print "ERROR: The base64 string (hash, salt, iterations) was not specified correctly as the second command line argument\n";



  exit (1);

}



my $bin_string = decode_base64 ($base64_string);



if (substr ($bin_string, 0, 3) ne "bs:")

{

  print "ERROR: signature of the decoded base64 string did not match 'bs:'\n";



  exit (1);

}



my $hash_target    = substr ($bin_string,  3, 32);

my $salt           = substr ($bin_string, 35, 16);

my $iterations_str = substr ($bin_string, 51,  4);



my $iterations = unpack ("L<", $iterations_str);



# salt to UUID conversion



$salt = unpack ("H*", substr ($salt,  0, 4)) . '-' .

        unpack ("H*", substr ($salt,  4, 2)) . '-' .

        unpack ("H*", substr ($salt,  6, 2)) . '-' .

        unpack ("H*", substr ($salt,  8, 2)) . '-' .

        unpack ("H*", substr ($salt, 10, 6));



# TODO: crc32 check (not really needed, we assume the rest is okay, not corrupt)



my $fh_dict;



if (! open ($fh_dict, "<", $dict_file_name))

{

  print "ERROR: Could not open dictionary file file '$dict_file_name'\n";



  exit (1);

}



binmode ($fh_dict);



while (my $pass = <$fh_dict>)

{

  chomp ($pass);



  my $hash = $salt . $pass;



  for (my $i = 0; $i < $iterations; $i++)

  {

    $hash = sha256 ($hash);

  }



  if ($hash eq $hash_target)

  {

    print "found pass: $pass\n";



    last;

  }

}



close ($fh_dict);