Brute forcing an I-almost-remember-it password

[parhs]

Hello everyone,
I know there is a similar post to the technical part of this forums but as I'm a "newbie" I couldn't post a reply to that specific thread, so I ask for your help here
I have a double encrypted wallet in Blockchain, in which I recently received 5 BTC. I created that wallet quite some time and I've forgotten that I set 2-steps of encryption!

I have a vague idea of the password, i know it consists of 3 parts, a word a small phrase and ending with digits and special characters.
I believe i remember the ending correctly, I have a few guesses for the first word and I remember the meaning of the midphrase but not sure, maybe it was paraphrased a bit differently, but i believe i remember most of the words correctly. Also I don't remember if I separated those 3 parts with some sort of special character or not (probably not but not sure :/)

I can export it in a aes.json format which will need 2 passwords to decrypt (the first I know, I'm looking for the second one) and the password was around roughly 28-35 characters.

So is there any script I could use for help? I'd prefer python since I'm most familiar with, but any working one would do.

Thanks!

[wzl]

any reason you don't just write your own script to do this?

[BitSmile]

I think you will not be succeded...unless you have an Avalon ASIC

[parhs]

I'm not that familiar with BTC wallets, their encryption or anything similar to my problem :/ . So anything that i will create will probably be inefficient or take me a lot of time to produce something that will be barelly descent. I saw that people have experienced similar problems and solved them, so that's why I'm asking for help from more experienced members.

I'm not sure what does an Avalon ASIC has to do with it?

[dr4]

I'm not sure what does an Avalon ASIC has to do with it?

I hope it's just a joke. Some people don't get it that these ASICS can only do double SHA256-hashing of a 80 byte long string. Nothing else. They aren't even good for password cracking unless you password is 80 bytes long and you have it as a sha256 hashe and could hash it a 2nd time.

[Psybin]

That sucks to hear.  I hope you remember it!

Clipperz.com will save your life (from this point forward).  It stores all your passwords and is encrypted on your side, so it's safe.

[BitSmile]

I'm not sure what does an Avalon ASIC has to do with it?

I hope it's just a joke. Some people don't get it that these ASICS can only do double SHA256-hashing of a 80 byte long string. Nothing else. They aren't even good for password cracking unless you password is 80 bytes long and you have it as a sha256 hashe and could hash it a 2nd time.

Should have researched before talking bs. Cracking requires lots of bandwidth.

[dr4]

I'm not sure what does an Avalon ASIC has to do with it?

I hope it's just a joke. Some people don't get it that these ASICS can only do double SHA256-hashing of a 80 byte long string. Nothing else. They aren't even good for password cracking unless you password is 80 bytes long and you have it as a sha256 hashe and could hash it a 2nd time.

Should have researched before talking bs. Cracking requires lots of bandwidth.

lol no. Does successfully cracking a couple of Password count as "research"? Why should it need lots of Bandwidth?

[503guy]

Look into john the ripper, good starting point it can be manipulated to fit your needs.

[dr4]

Look into john the ripper, good starting point it can be manipulated to fit your needs.

both hashcat-lite and hashcat-plus are using the GPU

[rick2g]

You'll need to create a script that can output as many variants of the pattern using as much of the password that you're sure of as possible.  It's highly dependent on how complex your password was and how much of the pattern you can recall.  Brute forcing thru 28-35 characters is not feasible.

[BCB]

That sucks to hear.  I hope you remember it!

Clipperz.com will save your life (from this point forward).  It stores all your passwords and is encrypted on your side, so it's safe.

Hey glad you like Clipperz.com.  Thanks for the shout out.   I did some work on the initial implementation.  It's not as popular as last pass yet but glad folks are finding it useful.

Cheers.