Encrypted wallet.dat, lost password, any solutions?

[ekiro]

Why encrypt it? Store it offline.

[1714897260]

1714897260

[1714897260]

1714897260

[1714897260]

1714897260

[nobbie]

i think i clicked that yellow box and the password screen pop'd up' so it seamd like a good idea.. i wish the value would start dropping again! im not going to be able to afford more at the current rate of increase its really annoying me

[karlb]

Okay so I've wrote a c sharp forms app that executes bitcoind with the walletpassphrase argument.
The problem is that bitcoind takes about a second to finish executing each time, so I can only try one password per second which is quite a slow rate.
Does everyone else get about this speed? is there a faster method?

[lerelerele]

http://www.youtube.com/watch?v=gmyzs2PPbBQ

[Liquid]

http://www.reddit.com/r/Bitcoin/comments/1q8zan/dave_bitcoin_of_walletrecoveryservicescom_just/

[Revalin]

Are Electrum wallets doable as well? I've lost my pass and seed. Couldn't even get a dump with pywallet and an electrum.dat file.

Bounty for anyone who can help of course.

Sure, I can do Electrum.  Their key stretching has an interesting flaw.  This script exploits it to get a few hundred times speedup compared to simple brute force.

My help is free but tips are always welcome.  I suggest 15%, just like tipping your waiter. 

Code:

#!/usr/bin/ruby
require 'base64'
require 'digest/sha2'
require 'open3'
require 'openssl'

# Double substitution for Electrum

# Put your best guess at your passphrase here
passphrase = 'Oops I forgot'

# The full path to your electrum.dat or default_wallet
wallet_file = '/home/revalin/.electrum/wallets/default_wallet'

# Where to find Electrum.  Use 1.9.2!  Older versions may be incompatible.
$electrum = '/home/revalin/Electrum-1.9.2/electrum'


def test(phrase)
  $cipher.reset
  $cipher.key = Digest::SHA256.digest(Digest::SHA256.digest(phrase))
  $cipher.update $seed
  $cipher.final
  puts phrase
  i,o,t = Open3.popen2e($electrum, "-o", "getseed")
  i.puts(phrase)
  i.close
  if t.value.success?
    puts "Found it! #{phrase}"
    exit
  end
rescue OpenSSL::Cipher::CipherError
end

def scramble(passphrase)
  characters = " !\"\#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~"
  list = []

  # transpose adjacent chars
  (passphrase.length - 1).times do |i|
    testphrase = passphrase.dup
    testphrase[i] = passphrase[i+1]
    testphrase[i+1] = passphrase[i]
    list << testphrase
  end

  # delete one char
  passphrase.length.times do |i|
    testphrase = passphrase.dup
    testphrase = testphrase[0,i] + testphrase[(i+1)..-1]
    list << testphrase
  end

  # substitutute one char
  passphrase.length.times do |i|
    characters.chars.each do |c|
      testphrase = passphrase.dup
      testphrase[i] = c
      list << testphrase
    end
  end

  # insert one char
  (passphrase.length + 1).times do |i|
    characters.chars.each do |c|
      testphrase = passphrase.dup
      testphrase.insert(i, c)
      list << testphrase
    end
  end

  return list.uniq
end

wallet = File.read(wallet_file)
seed_base64 = wallet.match(/'seed': '([^']+)'/).captures.first
$seed = Base64.decode64(seed_base64)
$cipher = OpenSSL::Cipher.new('aes-256-cbc')
$cipher.iv = $seed.slice!(0,16)
Dir.chdir File.dirname $electrum
list1 = scramble(passphrase)
list1.each { |i| test i }
list1.each { |i| scramble(i).each { |j| test j }}
puts "No luck."
exit 1

[captchunk]

Man I hate needing to have my hand held through things but I've never run a ruby script before. Electrum 1.9+ doesn't seem to want to load for me anymore in Windows so I tried in a Debian Live bootable USB but kept getting syntax errors (cool OS btw, now I see why people are into it).

Share of the bounty for the guy who helps the noob run Revalin's script?

[Revalin]

The scripts need Ruby 1.9.  Try this:

Code:

sudo apt-get install ruby1.9.1
sudo ln -sf /usr/bin/ruby1.9.1 /etc/alternatives/ruby

Then run it again.  If that doesn't work then paste the errors here so I can see what's wrong.

[captchunk]

Named the script rs.rb. Just "ruby rs.rb" to run, right? Ok here's the output:

user@debian:~/Desktop$ ruby rs.rb
rs.rb:13: unknown regexp option - r
rs.rb:13: syntax error, unexpected '.'
wallet_file = /home/user/.electrum/wallets/default_wallet
                          ^
rs.rb:16: unknown regexp option - r
rs.rb:16: no .<digit> floating literal anymore; put 0 before dot
$electrum = /home/user/Electrum-1.9.3/electrum'
                                    ^
rs.rb:16: syntax error, unexpected tINTEGER
$electrum = /home/user/Electrum-1.9.3/electrum'
                                     ^
rs.rb:16: syntax error, unexpected tSTRING_BEG, expecting keyword_do or '{' or '('
$electrum = /home/user/Electrum-1.9.3/electrum'
                                               ^
rs.rb:36: syntax error, unexpected '(', expecting $end
  characters = " !\"\#$%&'()*+,-./0123456789:;<=>?@ABCDE...


This is how I modified the top half of the script:

Code:

#!/usr/bin/ruby
require 'base64'
require 'digest/sha2'
require 'open3'
require 'openssl'

# Double substitution for Electrum

# Put your best guess at your passphrase here
passphrase = **********

# The full path to your electrum.dat or default_wallet
wallet_file = /home/user/.electrum/wallets/default_wallet

# Where to find Electrum.  Use 1.9.2!  Older versions may be incompatible.
$electrum = /home/user/Electrum-1.9.3/electrum

[Revalin]

You need to surround the strings with single quotes.  If there are any single quotes or backslashes in the strings you need to represent them as \' or \\ .  Like this:

Code:

#!/usr/bin/ruby
require 'base64'
require 'digest/sha2'
require 'open3'
require 'openssl'

# Double substitution for Electrum

# Put your best guess at your passphrase here
passphrase = 'I think i\'m a password'

# The full path to your electrum.dat or default_wallet
wallet_file = '/home/user/.electrum/wallets/default_wallet'

# Where to find Electrum.  Use 1.9.2!  Older versions may be incompatible.
$electrum = '/home/user/Electrum-1.9.3/electrum'

[/quote]

[captchunk]

Ok I think it's working. I'm seeing an output of the possible passwords in the terminal. Just to be certain, I shouldn't be seeing anything else right? The script has

Code:

 puts "No luck."

towards the end, I shouldn't be seeing after each password output, correct?

You sir are a Hero Member.

[captchunk]

Holy sheepshit I found it already!!!!!!!!!!!!!!

Mr. Revalin .7 BTC is coming your way

[funkymunky]

Holy sheepshit I found it already!!!!!!!!!!!!!!

Mr. Revalin .7 BTC is coming your way

Wow, good on you both

[Revalin]

Holy sheepshit I found it already!!!!!!!!!!!!!!

Mr. Revalin .7 BTC is coming your way

Thank you!  I'll make sure it's put to good use. 

Nobbie, sorry I missed you earlier.  Did you get it working?

[PTseller]

Mr Revalin
   
        Please help me out to Find Password of my wallet i am using Bitcoin wallet i have stored few BTC 8 months back but i forget my password and i have tried many times to recover it from past 6 days but i can't ! Please man help me out will give some reward for sure.

The main problem is that i am noob in using script and i can't understand script language so if you can tell me step by step process i can do it or if you have video tutorial then that's makes me happy !

Regards'
PTseller

[BTChap]

Hello Revalin,
I contact you in order to get your script running as i can't figure my password out anymore. I have a rough idea of what it was so i can narrow down to a handfull of characters and some numbers and 1 special sign
However i can't understand what to do with the code you've provided. I browsed the thread (not very deep i have to admit as i got lost quickly enough due to my lack of technical knowlede.
Knowing that i run W7 and have my wallet on Multibit, could you write down a quick guide of the soft i need to install and the procedure to get going at cracking this?

I'd be glad to hear from you ASAP
5% of funds going your way if i get it back.

[PrintMule]

Hello Revalin,
I contact you in order to get your script running as i can't figure my password out anymore. I have a rough idea of what it was so i can narrow down to a handfull of characters and some numbers and 1 special sign
However i can't understand what to do with the code you've provided. I browsed the thread (not very deep i have to admit as i got lost quickly enough due to my lack of technical knowlede.
Knowing that i run W7 and have my wallet on Multibit, could you write down a quick guide of the soft i need to install and the procedure to get going at cracking this?

I'd be glad to hear from you ASAP
5% of funds going your way if i get it back.

Seems a little to low. Depends on how much these 5% are worth though. You should specify that in this thread to raise additional interest/motivation.

[Rampion]

Hello Revalin,
I contact you in order to get your script running as i can't figure my password out anymore. I have a rough idea of what it was so i can narrow down to a handfull of characters and some numbers and 1 special sign
However i can't understand what to do with the code you've provided. I browsed the thread (not very deep i have to admit as i got lost quickly enough due to my lack of technical knowlede.
Knowing that i run W7 and have my wallet on Multibit, could you write down a quick guide of the soft i need to install and the procedure to get going at cracking this?

I'd be glad to hear from you ASAP
5% of funds going your way if i get it back.

Seems a little to low. Depends on how much these 5% are worth though. You should specify that in this thread to raise additional interest/motivation.

Revalin suggested 15%, BTChap offers 5% - not a good start

[Kazahstanec]

I am sorry - prompt and where a script? ?

[BTChap]

didn't see that 
Found my way around this issue as i had a backup copy of my wallet files.

SO my message to the newbs is: Make a copy of your wallet that you keep safe offline and one that is protected by a simple password. It works if you use multibit anyway :-) Check out their section on the forum, my case was explained there.