Bitcoin Forum
October 18, 2018, 11:41:40 PM *
News: Make sure you are not using versions of Bitcoin Core other than 0.17.0 [Torrent], 0.16.3, 0.15.2, or 0.14.3. More info.
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: Bitcoin vulnerability script?  (Read 709 times)
imjustagirl
Jr. Member
*
Offline Offline

Activity: 102
Merit: 4


View Profile WWW
September 07, 2017, 09:09:54 AM
 #1

Hi,
I have been thinking about investing a sum of money into bitcoin, so I have been reading about its vulnerabilities. As I understand, blockchain sometimes gives repeated R-values which makes some bitcoin wallets vulnerable to hacks. I wanted to find a tool to scan for such vulnerability, but seem to find none. I found R-scan, unfortunately it does not run under Windows, and I tried to run it in pythonanywhere, but to no success. Is there a tool to do this in Windows? Is there a tool to do this for the whole blockchain, so there is some output script like this http://www.want2pay.com/bad_randoms_bitcoin.html ? Please help, I want to make sure I can search for the vulnerability myself, instead of waiting for someone else to post it when its too late. Thanks in advance for your help!

MUNcoin ❱❭ When outstanding features meet perfect development team (http://muncoin.net/)
1539906100
Hero Member
*
Offline Offline

Posts: 1539906100

View Profile Personal Message (Offline)

Ignore
1539906100
Reply with quote  #2

1539906100
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1539906100
Hero Member
*
Offline Offline

Posts: 1539906100

View Profile Personal Message (Offline)

Ignore
1539906100
Reply with quote  #2

1539906100
Report to moderator
1539906100
Hero Member
*
Offline Offline

Posts: 1539906100

View Profile Personal Message (Offline)

Ignore
1539906100
Reply with quote  #2

1539906100
Report to moderator
ranochigo
Legendary
*
Offline Offline

Activity: 1568
Merit: 1094

Somewhat inactive.


View Profile WWW
September 07, 2017, 09:40:40 AM
 #2

Hi,
I have been thinking about investing a sum of money into bitcoin, so I have been reading about its vulnerabilities. As I understand, blockchain sometimes gives repeated R-values which makes some bitcoin wallets vulnerable to hacks.
It is NOT the fault of Bitcoin. The problem is with the implementation of the wallet; if there is a bug that somehow affects the randomness of the R value, your wallet will be vulnerable. This does not affect addresses with no transactions that is being spent. If you don't reuse address, you are completely safe. This does not cover the randomness of the address itself.
I wanted to find a tool to scan for such vulnerability, but seem to find none. I found R-scan, unfortunately it does not run under Windows, and I tried to run it in pythonanywhere, but to no success. Is there a tool to do this in Windows? Is there a tool to do this for the whole blockchain, so there is some output script like this http://www.want2pay.com/bad_randoms_bitcoin.html ? Please help, I want to make sure I can search for the vulnerability myself, instead of waiting for someone else to post it when its too late. Thanks in advance for your help!
You can easily set it up on Windows. There is no such tool for Windows, neither is there a need. By the time you try to scan it, your address would have already been compromised.

imjustagirl
Jr. Member
*
Offline Offline

Activity: 102
Merit: 4


View Profile WWW
September 07, 2017, 01:27:23 PM
 #3

I tried to run Rscan with python in cmd Windows. I always get the error "SyntaxError: Missing parentheses in call to 'print'"  Huh Maybe I'm doing it wrong?

MUNcoin ❱❭ When outstanding features meet perfect development team (http://muncoin.net/)
efeaydin
Full Member
***
Offline Offline

Activity: 183
Merit: 102


View Profile
September 07, 2017, 01:56:12 PM
 #4

I tried to run Rscan with python in cmd Windows. I always get the error "SyntaxError: Missing parentheses in call to 'print'"  Huh Maybe I'm doing it wrong?

The scripts is written in Python3, but you are trying to run it with Python2
imjustagirl
Jr. Member
*
Offline Offline

Activity: 102
Merit: 4


View Profile WWW
September 08, 2017, 06:34:16 PM
 #5

I run Python 3.5  Sad

MUNcoin ❱❭ When outstanding features meet perfect development team (http://muncoin.net/)
achow101
Moderator
Legendary
*
expert
Offline Offline

Activity: 1554
Merit: 1704


3F1Y9yquzvY6RWvKbw2n2zeo9V5mvBhADU


View Profile WWW
September 08, 2017, 08:26:54 PM
 #6

I tried to run Rscan with python in cmd Windows. I always get the error "SyntaxError: Missing parentheses in call to 'print'"  Huh Maybe I'm doing it wrong?

The scripts is written in Python3, but you are trying to run it with Python2
I run Python 3.5  Sad
It's the other way around; the script is in python 2 but you are using python 3.

posternat
Hero Member
*****
Offline Offline

Activity: 770
Merit: 500



View Profile
September 09, 2017, 06:19:18 AM
 #7

You are not going to be able to hit that sweet spot and take advantage of Bitcoin in the end. It is too hard to figure the right time and spot of the attack and there is no amount of scanning that is going to do it. It is like trying to scan private keys and find a wallet with a balance, the time is better spent getting coins the right way.

    ▄█▄
   ██▀  ▄█▄
  ██▀  ▄█▀  ▄▀
 ██▀  ▄█▀  ▄▀
▐█▌  ▄█▀  ▄▀
██   ██   
██   ██   
██   ██   
▐█▌  ▀█▄  ▀▄
 ██▄  ▀█▄  ▀▄
  ██▄  ▀█▄  ▀▄
   ██▄  ▀█▀
    ▀█▀
████
▀▀▀▀
▄▀▀▄▄▄▄▄▄▄▄█████████████▐████
▀▀     ▄▄▄▄▄▀██████████▐████
▄▀▀▄▄▄▄▄█████▀ ▀▄▄▄     ▐████
▀▀     ▄▀███▄▄▄▄       ▐████
▄▄   ▀█▄▄▄▄▄▄▄▄▄▄▄▄▄▄▐████
▀▄▄▀▀▀▀▀██████████████▐████
▄▄   ▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▐████

▀▄▄▀▀▀  ██████           ▐████
██████▄▀▀▀▀▀▀▀▀▀ ▐████

▄▄  ████▀▄██████████▐████
▀▄▄▀▀▀▀ ▄████████████▐████
BIDIUM       ▄█▄
   ▄█▄
  ▀██

▀▄  ▀█▄  ▀██
 ▀▄  ▀█▄  ▀██
  ▀▄  ▀█▄  ▐█▌
   █   ██   ██
   █   ██   ██
   █   ██   ██
  ▄▀  ▄█▀  ▐█▌
 ▄▀  ▄█▀  ▄██
▄▀
  ▄█▀  ▄██
   ▀█▀
  ▄██
       ▀█▀






























virasog
Legendary
*
Offline Offline

Activity: 966
Merit: 1001


View Profile
September 09, 2017, 07:13:55 AM
 #8

There have not been any scripts written for this and there won't be any. It is a waste of time because the resources are above the return. You can scan all day and night and even if the moment happens when you find the crack, it is going to be gone by the time that you manage a targeted attack. With a little luck you may get in there, but you might as well try hitting the lottery with one of those betting scams.


.
IDAP.IO.
██████
██████
███
███
███
███
███
███
███
███
███
██████
██████

▄██████████████████▄
███       ▀███████
███       █████████
███       █████████
███       █████████
███              ██
███   ▄▄▄▄▄▄▄▄   ███
███   ▄▄▄▄▄▄▄▄   ███
███              ███
███▄▄▄▄▄▄▄▄▄▄▄▄▄▄███
██████████████████▀

▄██████████████████▄
███████████▀ ███████
█████████▀   ███████
███████▀     ██▀ ███
███ ▀▀       █▄▄████
███          █▀▀▀▀██
███ ▄▄       ███████
██████▄     █▄ ▀███
█████████▄   ███▄███
███████████▄ ███████
▀██████████████████▀

▄██████████████████▄
████████████████████
███████████████▀▀ ██
█████████▀▀     ███
████▀▀     ▄█▀   ███
███▄    ▄██      ███
█████████▀      ▄██
█████████▄     ████
█████████████▄ ▄████
████████████████████
▀██████████████████▀
██████
██████
   ███
   ███
   ███
   ███
   ███
   ███
   ███
   ███
   ███
██████
██████
.
.Introducing Derivatives Product Ecosystem to Crypto Asset Market.
| Twitter | LinkedIn | Medium | Facebook | Bitcointalk | Instagram

btctousd81
Sr. Member
****
Offline Offline

Activity: 392
Merit: 252


View Profile WWW
September 09, 2017, 09:07:21 AM
 #9

Hi,
I have been thinking about investing a sum of money into bitcoin, so I have been reading about its vulnerabilities. As I understand, blockchain sometimes gives repeated R-values which makes some bitcoin wallets vulnerable to hacks. I wanted to find a tool to scan for such vulnerability, but seem to find none. I found R-scan, unfortunately it does not run under Windows, and I tried to run it in pythonanywhere, but to no success. Is there a tool to do this in Windows? Is there a tool to do this for the whole blockchain, so there is some output script like this http://www.want2pay.com/bad_randoms_bitcoin.html ? Please help, I want to make sure I can search for the vulnerability myself, instead of waiting for someone else to post it when its too late. Thanks in advance for your help!

can you provide link to R-scan ?

so i can test it ? thanks

imjustagirl
Jr. Member
*
Offline Offline

Activity: 102
Merit: 4


View Profile WWW
September 09, 2017, 09:33:29 AM
 #10

https://bitcointalk.org/index.php?topic=977070.0

The R-scan was in this thread. Now the more you tell me about it, the more I am curious, somehow people have done it though? I mean scanned the blockchains script signatures, if they were not using a script, then they used malware? Its not possible to scan the blockchain by personally looking at all the transactions, and obviously there is an output script like on the website I provided in my original post. Or was this done by the developers and they have some special tool for it?

Update: Thank you so much for pointing me in the right direction! I was able to run the script under Python 2.7 after installing simplejason dependencies, now I get another error:
Traceback (most recent call last):
  File "E:\rng-scanner-master\rscan.py", line 44, in <module>
    print "hash: " + str(addrdata['txs'][y]['hash'])
IndexError: list index out of range
 Embarrassed this is so frustrating, if you could give me any advice, I would appretiate it, thank you.

MUNcoin ❱❭ When outstanding features meet perfect development team (http://muncoin.net/)
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!