04-19-2021, 04:20 AM
Hello - I did something really stupid for a friend and lost their funds. I was on their windows machine and has temporarily written their seed and password in a notepad to be transferred later.
Right in the middle as we weren't paying attention for 5 min after funds were transferred, the machine decided to do an auto-update. It restarted and we lost the notepad doc.
fortunately, i have the keystore but being that it's a thorchain wallet I'm not sure how to get this into a useable format for hashcat.
here is a sample empty wallet hash and was wondering if someone could help me get this into a usable file so i can process with hashcat.
FWIW - the password to this is bit and its an empty wallet to see if i could break a simple password first. If someone should use this to test the right format and tell me which hashmode to run, that would be great!
Promise to somehow repay a favor and send a box of Hawaii snacks and stuff to the person/people that help me get it to a point where I can run hashcat against this.
Right in the middle as we weren't paying attention for 5 min after funds were transferred, the machine decided to do an auto-update. It restarted and we lost the notepad doc.
fortunately, i have the keystore but being that it's a thorchain wallet I'm not sure how to get this into a useable format for hashcat.
here is a sample empty wallet hash and was wondering if someone could help me get this into a usable file so i can process with hashcat.
Code:
{"crypto":{"cipher":"aes-128-ctr","ciphertext":"4f1464c43704d6d4eb655aae2f1adb31d4ebe53fbdffdd88ef9debfdd51b96ba6d399847e04e2a66cd60a2d95c721f9cdf4c3d107dfec61e4d95d6b2bd1ff1130bf7c715da6f5c39c9b61e92b5d5","cipherparams":{"iv":"f07c8793a54e4d413a3ae0bf0e26570a"},"kdf":"pbkdf2","kdfparams":{"prf":"hmac-sha256","dklen":32,"salt":"49d7cca0ad195b43bc48fa3581018b59a27d5a1ed3bf83e8fbe349868fabc850","c":262144},"mac":"7179d6b1eb3bcd36db74cee64d11682b720ec643f58367cf592ac351842fee24"},"id":"8c3a7bde-30a2-49c1-9bae-0ab2d7a7ebe6","version":1,"meta":"xchain-keystore"}FWIW - the password to this is bit and its an empty wallet to see if i could break a simple password first. If someone should use this to test the right format and tell me which hashmode to run, that would be great!
Promise to somehow repay a favor and send a box of Hawaii snacks and stuff to the person/people that help me get it to a point where I can run hashcat against this.