Bitcoin Forum

Bitcoin => Bitcoin Technical Support => Topic started by: marineralpha on September 12, 2018, 09:32:21 AM



Title: Have I Been Robbed?
Post by: marineralpha on September 12, 2018, 09:32:21 AM
Hi Guys,

I have an old blockchain.info wallet and have tried to get into it using btcrecover.I tried to follow the instructions on the website but am not very 'tecchy' so I followed a guide which a guy had put on YouTube which was very helpful. After doing all the installs etc and having no joy only 'password search exhausted' I made a new account to check see if it actually worked and I still get 'password search exhausted' even though it's a known password and I have seen it in '--listpass'

Here is the guys video:

https://www.youtube.com/watch?v=rMtW8vIHHek&t=1s

Now my instinct tells me that this guy is legit. He has been posting videos for a couple of years and still answers questions (he actually answered a couple of emails I sent him) to people on his videos etc.

Any help would be greatly appreciated.



Title: Re: Have I Been Robbed?
Post by: mocacinno on September 12, 2018, 09:34:34 AM
Hi Guys,

I have an old blockchain.info wallet and have tried to get into it using btcrecover.I tried to follow the instructions on the website but am not very 'tecchy' so I followed a guide which a guy had put on YouTube which was very helpful. After doing all the installs etc and having no joy only 'password search exhausted' I made a new account to check see if it actually worked and I still get 'password search exhausted' even though it's a known password and I have seen it in '--listpass'

Here is the guys video:

https://www.youtube.com/watch?v=rMtW8vIHHek&t=1s

Now my instinct tells me that this guy is legit. He has been posting videos for a couple of years and still answers questions (he actually answered a couple of emails I sent him) to people on his videos etc.

Any help would be greatly appreciated.



Since the video is 13+ minutes, i haven't watched it... But...

As long as you cloned/downloaded btcrecover from https://github.com/gurnec/btcrecover and didn't enter your details on any other site exept blockchain.info or blockchain.com, everything should be ok. It's not because btcrecover can't find your password that you are "robbed", you've probably messed up somewhere while configuring btcrecover.

If you cloned/download btcrecover from somewhere else, or the video told you to enter any details on a website other than blockchain.info/blockchain.com and/or share any of those details with anybody else, it's possible you got scammed... But we'd need more info than your OP provided to determine if this was the case.

Do you know the addresses belonging to the wallet you want to recover? If you do, you can check the balance of these addresses on a block explorer (like blockchain.info) and see if any of the unspent outputs funding those addresses were spent since you tried recovering your wallet? If nothing moved, everything is fine... You just need to fine-tune btcrecover and find out where exactly you messed up.


Title: Re: Have I Been Robbed?
Post by: nc50lc on September 12, 2018, 10:19:36 AM
-snip-
Blockchain.info's Mnemonic phrase isn't an actual Bitcoin Seed, it is only usable as a backup using the site's UI or compatible APIs.
If you didn't heard the news, the sites domain changed into blockchain.com but still accessible using the old domain name.

If you wanted to recover the old wallet, you just have to restore it to their site using the "forgot-password button" for old wallet backups: https://login.blockchain.com/wallet/forgot-password (https://login.blockchain.com/wallet/forgot-password)
The page displays: "If you have a legacy wallet recovery mnemonic saved enter it below to view the password and login link."
You should be able to restore your wallet from there.


Title: Re: Have I Been Robbed?
Post by: bob123 on September 12, 2018, 10:42:42 AM
If you want to use btcrecover to recover your blockchain.info password, you'll need the .json (usually named wallet.aes.json).
You can download this file using the download-blockchain-wallet.py (also inside btcrecover repository) if you know your wallet ID (and 2FA is disabled).

Without the file, you unfortunately can't use btcrecover to recover your password.


Title: Re: Have I Been Robbed?
Post by: marineralpha on September 12, 2018, 12:50:02 PM
I have done a full uninstall and reinstall of all the software associated with btcrecover and I still get 'password search exhausted' on a token list which I know definitely contains my password (ran --listpass).

I just can't understand why?


Title: Re: Have I Been Robbed?
Post by: bob123 on September 13, 2018, 12:00:38 PM
I just can't understand why?

Do you have a file to run the password search on ?
Or HOW are you trying to recover your online password with btcrecover ?

Reinstalling btcrecover won't help you there. It is running/working as expected.


Title: Re: Have I Been Robbed?
Post by: marineralpha on September 27, 2018, 12:05:21 PM
I just can't understand why?

Do you have a file to run the password search on ?
Or HOW are you trying to recover your online password with btcrecover ?

Reinstalling btcrecover won't help you there. It is running/working as expected.

Yeah I have downloaded the .json file from blockchain.info

I agree that it seems to be running as expected but as I said it is not finding my password even though I have seen it right there in the --listpass.


Title: Re: Have I Been Robbed?
Post by: mocacinno on September 27, 2018, 12:11:11 PM
Yeah I have downloaded the .json file from blockchain.info

I agree that it seems to be running as expected but as I said it is not finding my password even though I have seen it right there in the --listpass.

Just a dumb question, but you aren't using the --listpass argument when you actually try to bruteforce your password... Right?

Quote
If you'd just like to test your token file and/or chosen typos, you can use the --listpass option in place of the --wallet FILE option as demonstrated below. btcrecover will then list out all the passwords to the screen instead of actually testing them against a wallet file
source: https://github.com/gurnec/btcrecover/blob/master/TUTORIAL.md#btcrecover-tutorial


Title: Re: Have I Been Robbed?
Post by: marineralpha on September 27, 2018, 12:57:24 PM
Just a dumb question, but you aren't using the --listpass argument when you actually try to bruteforce your password... Right?[/quote]

No mate. I have ran a brute force and got 'password search exhausted' but my password was in the list when running --listpass.


Title: Re: Have I Been Robbed?
Post by: Kprawn on September 27, 2018, 04:39:46 PM
What is the chances that the person helping you, already changed the password to something else? I know this might sound

stupid, but I am just adding another possible scenario to this discussion. The Mnemonic phrase will allow you to restore the

wallet, but the bitcoins on that wallet might be gone or just waiting to be exploited. I would not use that wallet anymore, if I

was you.  ::)