(08-28-2023, 07:25 AM)nick8606 Wrote: Last part of your hash 6533786935517843666a4555514537756d5...3d3d0a is Base64-encoded. Use blockchain2john.py with --base64 option. Or you can decode your data with any suitable tool (don't forget to write correct size).
When trying to use blockchain2john with base64, I get no output. Using with the --json switch, I get an error.
Code:
Traceback (most recent call last):
File "LOCATION\blockchain2john.py", line 39, in <module>
decoded_data = json.loads(data.decode("utf-8"))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "C:\Program Files\WindowsApps\PythonSoftwareFoundation.Python.3.11_3.11.1520.0_x64__qbz5n2kfra8p0\Lib\json\__init__.py", line 346, in loads
return _default_decoder.decode(s)
^^^^^^^^^^^^^^^^^^^^^^^^^^
File "C:\Program Files\WindowsApps\PythonSoftwareFoundation.Python.3.11_3.11.1520.0_x64__qbz5n2kfra8p0\Lib\json\decoder.py", line 337, in decode
obj, end = self.raw_decode(s, idx=_w(s, 0).end())
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "C:\Program Files\WindowsApps\PythonSoftwareFoundation.Python.3.11_3.11.1520.0_x64__qbz5n2kfra8p0\Lib\json\decoder.py", line 355, in raw_decode
raise JSONDecodeError("Expecting value", s, err.value) from None
json.decoder.JSONDecodeError: Expecting value: line 1 column 1 (char 0)
The hash was created, I believe, with blockchain2john about 5/6/7 years ago from last time I tried cracking this.
I have tried both on Windows and Ubuntu 22 with Python3.
Below is the contents of the known-password, 0BTC wallet.aes.json file
Code:
e3xi5QxCfjEUQE7umPRrWEQirlE2+p0cdHQfth+TFn7cKkZwqLWtdnUoHa357UX+ZpCdPfgMJL+VsfYOO0rAlAHV+l7ufh7xA0BM2H35qz4bWeokuWqPPwk+jOy5w+a2vhOxcwx45t310byn2Js+Dp0S0SmJhWx1wp5qIssjtnl4ffVZ7aeFaXiFI7TEBHDS14SWFoM5ksf4hnRcDsCJRb3stPZDfcbx0w0t6Sqz0hD/Db8Sw/TrPC/P/A7oB1gnC++3SpcUYDcLZg2r0zWxOHwUCH14/jpf7NOONpOVstmzBVN6ft5OQjlokM7tvjN63tp95ZqVYtH+J+MMdzmJbNNM81fAJhNq5ZDkbMOerUzRX3u5N1qkvMJDwiw6U78ExlQ5WCEzFI91pj0fRJZEJx83wEjKx5BndbmynGdm+L2uZkGeKbGOD4MqonP3tqOXigDJzi45p6RUr7cVqEhmlzMkQLjLre6IXRi5M8C99uIDFbyHRDSlpyblPIWYh9YyKRYJ93bbSLhzt5WZWi3OApP0dMCRUjV+oH0dXw1Vr2089O43UPE3xiJ1U6Yg7JBv4NaQyxvMFFgrIzoEjKAgSb7QUX08A89SrF2zYVm3d60mvlZ9Z3d7IUK2B4t+CWA7nl6Qz7FJd5t3/uhVOhzrWU6UNJTQWu+5+4pVK6RcC2qTABD0dtAijOc5XB4SXVQN62IfOJj66TqESjk8hflv1lBggkD8EICj1/SB8GXRsq3aOG3kIY5o4bFdAOUC6rNf0H/+HLiM6XmMi+v1EevAOvgqxuR7gKAduXLtNphIQG/Nefjcdd/NrByBGHPH0Pbq+jPcU4bLMXZzGmXS2h88Lw==
Edit: I noticed I have two files for the known wallet. Below is the contents of the backup from blockchain according to my notes. It wasn't named wallet.aes.json, though. I get the same results with blockchain2john.
I also notice that the first (above) one is 857 chars long and the second (below) one is 512 long. My unknown password backup is 641 long. Not sure if this means anything or is of concern.
Code:
ntxGCsuoegyAjmP2YttCFJ5RXJsV/a8JSNnZl0oPeMwsREvO+F5AdMKi5ji0DEJ4p13gTO889UmbyI7DKOMMQggG+U8YloFoDRHu3PQUUUQ1VMiFesBsjokr59lX1Q/CaBszMI2XV7eT/vHaWSV5yNU2u8EfLAEjBCO9O7613NrU05EwkKxj4RSwQ6jy1v164lnZGqX2cT8bxUJbAn22qbNo//q3G+rusKUbWe5fVU+AR/GiTSvumU8ULwnsG7L15JKhggimXt5TkvDxS/Qdlv9wVWAIuJhik3a+12+bcCIwlqTzX6tLyVNQLC6s257818qIzxogJyHF9Jh/71tYMiHvUGQ6sjLNripxmdA5K3QuUvaTImiTVFZ3vkfv0k0wdnzC3F0eYVUOCxatiqqF+axgUbSh4iGR6VEAaEK/b+jflBKMdgaaKXEbN7JWHikTsZNvRVwpR0+sZ4rV8uSxc/l1rcdnjAfUbZj0M6zDCV7IJPiUMZO3EUrey8hpVQSk
Thanks