Trying to recover a blockchain.info wallet
#11
(12-11-2019, 11:05 PM)undeath Wrote: that just means hashcat can't find the myhash.txt file

Didn't manage to crack it but anyway thank you guys for all your help, Much appreciated!!
Reply
#12
are you able to share the wallet file or hash in private (after of course all funds are moved out etc) ?

it would be interesting to see if this is some hashcat bug/problem or not

of course we would need both the file/hash and also the password
Reply
#13
I think by looking at this source code files:

1. https://github.com/blockchain/My-Wallet-...son#L8-L22
2. https://github.com/blockchain/My-Wallet-...son#L3-L38
3. https://github.com/blockchain/My-Wallet-...js#L18-L52
4. https://github.com/blockchain/My-Wallet-...#L447-L463

we are missing some patterns for sure, maybe this is a complete list:

guid
sharedKey
double_encryption
dpasswordhash
metadataHDNode
options
address_book
tx_notes
tx_names
keys
hd_wallets
paidTo


compare this with what we currently support in
https://github.com/hashcat/hashcat/blob/...#L348-L423

the loop in the hashcat kernel is used because there could be tabs, spaces and parenthesis before those strings (see also the discussion over https://github.com/hashcat/hashcat/issue...-469038973)

So if we really are expecting/know that some of these patterns are missing, we should add them for sure. What do you think ?
Reply
#14
@jennifer4682 We did some changes on the code: https://github.com/hashcat/hashcat/pull/2249
we would really need that you tests it to make sure that this fixed your problems (you can use the beta https://hashcat.net/beta/ which includes the fixes).

Could you kindly test it and report back. Thx
Reply
#15
(12-13-2019, 12:34 PM)philsmd Wrote: @jennifer4682 We did some changes on the code: https://github.com/hashcat/hashcat/pull/2249
we would really need that you tests it to make sure that this fixed your problems (you can use the beta https://hashcat.net/beta/ which includes the fixes).

Could you kindly test it and report back. Thx
worded on mine :|
Reply