howto: convert btcrecover bc: hashes to hashcat hash format - Printable Version +- hashcat Forum (https://hashcat.net/forum) +-- Forum: Misc (https://hashcat.net/forum/forum-15.html) +--- Forum: User Contributions (https://hashcat.net/forum/forum-25.html) +--- Thread: howto: convert btcrecover bc: hashes to hashcat hash format (/thread-9479.html) |
howto: convert btcrecover bc: hashes to hashcat hash format - philsmd - 08-30-2020 Recently an user contacted me via forum PM on how to convert a "bc:" hash extracted by btcrecover from a bitcoin wallet (wallet.dat) to the format that hashcat supports: Code: -m 11300 = Bitcoin/Litecoin wallet.dat (see https://github.com/3rdIteration/btcrecover/blob/master/extract-scripts/extract-bitcoincore-mkey.py) the answer of course is that you need to understand each field and the format that btcrecover uses (it's some binary data concatenated together and base64 encoded). The "bc:" at the start of the decoded string indicates that it's a hash of the bitcoin core wallet. So the answer is to study and try to understand the extract script of btcrecover and construct a hashcat-compatibe script out of it. You can use this conversion script to automatically convert them (it's a very simple script, not guaranteed to work in 100% of the cases, but it definitely worked for the user): Code: #!/usr/bin/env perl The problem seemed to be that the user didn't have access to the original wallet.dat file (for instance a wallet recovery service etc could be in that situation, just an example, but again: it's still dangerous to share those hashes with untrusted parties). So just to be very clear: if you have access to the wallet.dat file you shouldn't use this method but use bitcoin2john.py instead |