This is security by obscurity. Just like putting your house keys under a rock beneath the door.
Topic: Changing file name wallet.dat (Read 2613 times)
I just ran: c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998 and I now have a wallet file with that name. Its 88 kbyte. I also have a file named wallet.dat that is 421696 kbyte. Its an acutally wallet file and its not protected by a password (sounds juicy, right?).
So, in order to access wallet Christian1.998, you need to c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998, right? Otherwise it would load your wallet.dat, correct?
Best regards
Christian
Thanks Christian, I noticed btw that if you wanna access the default wallet again, you should use the command line also (c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=wallet.dat), if not, you'll get an wallet error.
Cant confirm, I just started as usual (via shortcut) after the test and everything was as expected (regular wallet.dat file loaded).
I just ran: c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998 and I now have a wallet file with that name. Its 88 kbyte. I also have a file named wallet.dat that is 421696 kbyte. Its an acutally wallet file and its not protected by a password (sounds juicy, right?).
So, in order to access wallet Christian1.998, you need to c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998, right? Otherwise it would load your wallet.dat, correct?
Best regards
Christian
Thanks Christian, I noticed btw that if you wanna access the default wallet again, you should use the command line also (c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=wallet.dat), if not, you'll get an wallet error.
I just ran: c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998 and I now have a wallet file with that name. Its 88 kbyte. I also have a file named wallet.dat that is 421696 kbyte. Its an acutally wallet file and its not protected by a password (sounds juicy, right?).
So, in order to access wallet Christian1.998, you need to c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998, right? Otherwise it would load your wallet.dat, correct?
Best regards
Christian
Thanks Christian, I noticed btw that if you wanna access the default wallet again, you should use the command line also (c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=wallet.dat), if not, you'll get an wallet error.
I just ran: c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998 and I now have a wallet file with that name. Its 88 kbyte. I also have a file named wallet.dat that is 421696 kbyte. Its an acutally wallet file and its not protected by a password (sounds juicy, right?).
So, in order to access wallet Christian1.998, you need to c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998, right? Otherwise it would load your wallet.dat, correct?
Best regards
Christian
I just ran: c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998 and I now have a wallet file with that name. Its 88 kbyte. I also have a file named wallet.dat that is 421696 kbyte. Its an acutally wallet file and its not protected by a password (sounds juicy, right?).
So, in order to access wallet Christian1.998, you need to c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998, right? Otherwise it would load your wallet.dat, correct?
That data directory can be changed. Still, the there are thousands of files of that size, which can amount to large downloads from the victim and extra time sorting. It isn't as easy as you think it is.
But its not impossible 
If you can create an algo for that its more easylier than you think.
Best regards
Christian
Is that so?
I just ran: c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998 and I now have a wallet file with that name. Its 88 kbyte. I also have a file named wallet.dat that is 421696 kbyte. Its an acutally wallet file and its not protected by a password (sounds juicy, right?).
I did not compile anything for this and I dont think there is an upper bound to the size of a wallet file. 400 MB is pretty much the upper bound of what I want to run, but other people might see this differently. Anyway I did a quick search and found 88603 files that match that size range. The system is not even a month old.
Ive forgotten that you can specify the extension over the comandline ^^I just ran: c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998 and I now have a wallet file with that name. Its 88 kbyte. I also have a file named wallet.dat that is 421696 kbyte. Its an acutally wallet file and its not protected by a password (sounds juicy, right?).
I did not compile anything for this and I dont think there is an upper bound to the size of a wallet file. 400 MB is pretty much the upper bound of what I want to run, but other people might see this differently. Anyway I did a quick search and found 88603 files that match that size range. The system is not even a month old.
But if you just start it with your folder, your wallet gets saved in the appdatadir right ? If you search only in this location, and zip the found files then you got all possible "wallets".
Best regards
Christian
Is that so?
I just ran: c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998 and I now have a wallet file with that name. Its 88 kbyte. I also have a file named wallet.dat that is 421696 kbyte. Its an acutally wallet file and its not protected by a password (sounds juicy, right?).
I did not compile anything for this and I dont think there is an upper bound to the size of a wallet file. 400 MB is pretty much the upper bound of what I want to run, but other people might see this differently. Anyway I did a quick search and found 88603 files that match that size range. The system is not even a month old.
Ive forgotten that you can specify the extension over the comandline ^^I just ran: c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998 and I now have a wallet file with that name. Its 88 kbyte. I also have a file named wallet.dat that is 421696 kbyte. Its an acutally wallet file and its not protected by a password (sounds juicy, right?).
I did not compile anything for this and I dont think there is an upper bound to the size of a wallet file. 400 MB is pretty much the upper bound of what I want to run, but other people might see this differently. Anyway I did a quick search and found 88603 files that match that size range. The system is not even a month old.
But if you just start it with your folder, your wallet gets saved in the appdatadir right ? If you search only in this location, and zip the found files then you got all possible "wallets".
Best regards
Christian
I can specify any location that is reachable. I probably can specify a location that is unreachable and bitcoin core would just fallback to the default. Thus the file does not even have to be on the system unless I start core, it could be in a encrypted container. Anyway, if you zip all possible files you pretty much zip my entire hard drive. Thats certainly a possible way to steal a wallet file, its just a question of disk storage and whether you can do it slow and silent enough for the victim not to notice.
I hope more malware coders use your approach.
Is that so?
I just ran: c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998 and I now have a wallet file with that name. Its 88 kbyte. I also have a file named wallet.dat that is 421696 kbyte. Its an acutally wallet file and its not protected by a password (sounds juicy, right?).
I did not compile anything for this and I dont think there is an upper bound to the size of a wallet file. 400 MB is pretty much the upper bound of what I want to run, but other people might see this differently. Anyway I did a quick search and found 88603 files that match that size range. The system is not even a month old.
Ive forgotten that you can specify the extension over the comandline ^^I just ran: c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998 and I now have a wallet file with that name. Its 88 kbyte. I also have a file named wallet.dat that is 421696 kbyte. Its an acutally wallet file and its not protected by a password (sounds juicy, right?).
I did not compile anything for this and I dont think there is an upper bound to the size of a wallet file. 400 MB is pretty much the upper bound of what I want to run, but other people might see this differently. Anyway I did a quick search and found 88603 files that match that size range. The system is not even a month old.
But if you just start it with your folder, your wallet gets saved in the appdatadir right ? If you search only in this location, and zip the found files then you got all possible "wallets".
Best regards
Christian
Actually they will not be the same size. Wallets with more keys will be bigger. Also, I don't think that they all will end with .DAT. I'm pretty sure that the extension can be changed.
Of course you can change the extension. But you need to change it, and compile your own ^^The size is smaller than X and bigger than Y, so the "Bot" can search the file.
Have a nice day
Christian
Is that so?
I just ran: c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998 and I now have a wallet file with that name. Its 88 kbyte. I also have a file named wallet.dat that is 421696 kbyte. Its an acutally wallet file and its not protected by a password (sounds juicy, right?).
I did not compile anything for this and I dont think there is an upper bound to the size of a wallet file. 400 MB is pretty much the upper bound of what I want to run, but other people might see this differently. Anyway I did a quick search and found 88603 files that match that size range. The system is not even a month old.
Actually they will not be the same size. Wallets with more keys will be bigger. Also, I don't think that they all will end with .DAT. I'm pretty sure that the extension can be changed.
Of course you can change the extension. But you need to change it, and compile your own ^^The size is smaller than X and bigger than Y, so the "Bot" can search the file.
Have a nice day
Christian
If you know how to code a stealer, its not needed that the wallet.dat is named as wallet.dat, the wallets have all ~ the same size for example.
You need to search only the complete machine for files which have ~ the size and are ending with .dat.
Then you can zip these files with a password and sent them over an email to the spreader of the stealer.
I hope all understand my bad english ^^
Best regards Christian
Actually they will not be the same size. Wallets with more keys will be bigger. Also, I don't think that they all will end with .DAT. I'm pretty sure that the extension can be changed. You need to search only the complete machine for files which have ~ the size and are ending with .dat.
Then you can zip these files with a password and sent them over an email to the spreader of the stealer.
I hope all understand my bad english ^^
Best regards Christian
If you know how to code a stealer, its not needed that the wallet.dat is named as wallet.dat, the wallets have all ~ the same size for example.
You need to search only the complete machine for files which have ~ the size and are ending with .dat.
Then you can zip these files with a password and sent them over an email to the spreader of the stealer.
I hope all understand my bad english ^^
Best regards Christian
You need to search only the complete machine for files which have ~ the size and are ending with .dat.
Then you can zip these files with a password and sent them over an email to the spreader of the stealer.
I hope all understand my bad english ^^
Best regards Christian
my advice is simply change the default bitcoin directory add a password. i run all mine inside a VM and only use it for wallets.
adding a password and changing the default directory will mess up almost all the wallet stealers out there
Indeed, a good advice. Thanks. adding a password and changing the default directory will mess up almost all the wallet stealers out there
my advice is simply change the default bitcoin directory add a password. i run all mine inside a VM and only use it for wallets.
adding a password and changing the default directory will mess up almost all the wallet stealers out there
adding a password and changing the default directory will mess up almost all the wallet stealers out there
Thanks to you all guys
There was a post about keeping the wallet and the DB on the same media... so be aware.If you get hackish and spread the data to multiple disks (like me) you could corrupt when you have a blackout.
I'm aware, I've tested it with a testnet wallet and apparently it doesn't work (in testnet?). Bitcoin-Qt (testnet) didn't know what to do and I got a popup "failed to salvage the wallet".
You can change the name of the wallet by using the -wallet flag every time you start the program. Something like this:
It changes the name of the wallet but also needs to have that every time you run Bitcoin Core so that it doesn't create another wallet.dat file.
Code:
bitcoin-qt -wallet=newwallet.dat
It is better to create a shortcut, add that command and when you want to start Bitcoin core, use that shortcut.[1] Remember, auto start will create problems. To prevent this, turn off auto start in Bitcoin-qt and the created shortcut to C:\Users\Chachu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup.
[1]
Clever! Must admit I've been noticing you around a lot the last few months Muhammed Zakir & you're beginning to come across as one of the most helpful, knowledgable posters on here. Keep it up bro, we need more people like you on here.
Thanks to you all guys
There was a post about keeping the wallet and the DB on the same media... so be aware.If you get hackish and spread the data to multiple disks (like me) you could corrupt when you have a blackout.
Thanks to you all guys
Jump to: