Help to recover BTC | Bitcointalksearch.org

StefanKing

newbie

Activity: 14

Merit: 0

Quote from: jojo18 on May 03, 2021, 07:09:22 AM

I have rememberd I think

I have found pycrypto software which i need to run in python. This will probably solve the text and password.

Do you have the btc address?
You can try EASEUS data recovery software. It works way better than other recovery softwares.

HCP

legendary

Activity: 2086

Merit: 4316

Quote from: jojo18 on May 03, 2021, 07:09:22 AM

I have rememberd I think

I have found pycrypto software which i need to run in python. This will probably solve the text and password.

pycrypto is just a Python library that offers "easy" access to various encryption algorithms... while it may be possible to use it to decrypt the cipher text using your password, you still won't be able to do so without knowing the correct encryption algorithm to use. Undecided

I guess one advantage is that you'll be able to try the decryption locally using Python and pycrypto instead of relying on external tools etc. The downside of course is that there are quite a large number of algorithms that you will need to try.

Good luck!

jojo18

newbie

Activity: 13

Merit: 6

I have rememberd I think

I have found pycrypto software which i need to run in python. This will probably solve the text and password.

jojo18

newbie

Activity: 13

Merit: 6

You can take help from some third party data recovery software to find you data in you HDD.
[/quote]

I tried that and found just the code.... tried all data recovery software but nothing Cry

haleema

jr. member

Activity: 560

Merit: 4

Quote from: jojo18 on April 28, 2021, 04:43:14 AM

Hi all,

In 2013 i purchased some BTC. From the guy that sold me i have recieved some text and password which i needed to decrypt and then create wallet. I had instructions but deleted form HDD. Can somebody help me how can I decrypt this text in usable format? I know that I needed to download some program from github if I recall but I do not know the details.

Thanks

Regards

You can take help from some third party data recovery software to find you data in you HDD.

jojo18

newbie

Activity: 13

Merit: 6

Doesent work. tried every type but no results.

I have found Bitcoin address utility from casascius. Is it possible with this app to change some signs when decrypting?

Thanks

Regards

jojo18

newbie

Activity: 13

Merit: 6

Quote from: HCP on April 30, 2021, 04:50:41 AM

Quote from: jojo18 on April 28, 2021, 07:30:59 AM

No there is * at the end of the pass but there is no =

Oh snap... I just realised you said the * was at the end of the "pass"! Roll Eyes

I'm an idiot! Tongue

Can you explain me if this i good or bad Huh

Quote from: jojo18 on April 30, 2021, 04:25:19 AM

this is what the tex looks like

AQAAxxxxxxx+AAUxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxR0RR

xxxx are numbers and letters no other signs

It likely is a Base64 representation of some encoded text... I was experimenting here: https://encode-decode.com/blowfish-encrypt-online/

and discovered that with a 12 character password ("password1234"), there are several encryption algorithms like Blowfish, des, cast etc that return 76 character encrypted text when you encrypt a private key.

ie. Blowfish:

Code: (private key)

L5RGSf2pShsFAbtUXeQwdsCWWuo4qLkaVaSJX2nVCTupAxhCU3Gk

Code: (password)

password1234

Code: (blowfish cipher text)

BT33LMVnYpnNk+eCy32KI3aQaBzeH8TQZtUvs0WZ1TO5ndJGiBP0JcnNq9WsKRNH8icgHWeCbAQ=

Now, I DO NOT recommend that you go an put your cipher text and password into some random encoder/decoder website like this... but it might be worth seeing if you can find some reputable encryption tools that you can use to try testing various encryption algorithms with your cipher text+password.

I will try this. thanks

HCP

legendary

Activity: 2086

Merit: 4316

Quote from: jojo18 on April 28, 2021, 07:30:59 AM

No there is * at the end of the pass but there is no =

Oh snap... I just realised you said the * was at the end of the "pass"! Roll Eyes

I'm an idiot! Tongue

Quote from: jojo18 on April 30, 2021, 04:25:19 AM

this is what the tex looks like

AQAAxxxxxxx+AAUxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxR0RR

xxxx are numbers and letters no other signs

It likely is a Base64 representation of some encoded text... I was experimenting here: https://encode-decode.com/blowfish-encrypt-online/

and discovered that with a 12 character password ("password1234"), there are several encryption algorithms like Blowfish, des, cast etc that return 76 character encrypted text when you encrypt a private key.

ie. Blowfish:

Code: (private key)

L5RGSf2pShsFAbtUXeQwdsCWWuo4qLkaVaSJX2nVCTupAxhCU3Gk

Code: (password)

password1234

Code: (blowfish cipher text)

BT33LMVnYpnNk+eCy32KI3aQaBzeH8TQZtUvs0WZ1TO5ndJGiBP0JcnNq9WsKRNH8icgHWeCbAQ=

Now, I DO NOT recommend that you go an put your cipher text and password into some random encoder/decoder website like this... but it might be worth seeing if you can find some reputable encryption tools that you can use to try testing various encryption algorithms with your cipher text+password.

jojo18

newbie

Activity: 13

Merit: 6

Quote from: HCP on April 30, 2021, 04:19:54 AM

what are the exact first 4 characters and the exact last 4 characters of your "text"? I've been trying to figure out what format it is in... and I'm wondering if there is more to this that we realise from your description.

Again, obviously, don't post the whole thing as it is apparently only protected by a 12 character password Tongue

this is what the tex looks like

AQAAxxxxxxx+AAUxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxR0RR

xxxx are numbers and letters no other signs

HCP

legendary

Activity: 2086

Merit: 4316

what are the exact first 4 characters and the exact last 4 characters of your "text"? I've been trying to figure out what format it is in... and I'm wondering if there is more to this that we realise from your description.

Again, obviously, don't post the whole thing as it is apparently only protected by a 12 character password Tongue

jojo18

newbie

Activity: 13

Merit: 6

Quote from: LoyceV on April 30, 2021, 03:43:49 AM

Quote from: jojo18 on April 30, 2021, 03:20:32 AM

it would be easier if I havent deleted instructions Grin

Any chance you can still reach the guy who sold you the coins?

Unfortunately no. I have deleted this messages along time ago Cry

LoyceV

legendary

Activity: 3290

Merit: 16489

Thick-Skinned Gang Leader and Golden Feather 2021

Quote from: jojo18 on April 30, 2021, 03:20:32 AM

it would be easier if I havent deleted instructions Grin

Any chance you can still reach the guy who sold you the coins?

jojo18

newbie

Activity: 13

Merit: 6

I have checked and its not the brain wallet Cry

it would be easier if I havent deleted instructions Grin

Now I can only guess what to do with recieved text

HCP

legendary

Activity: 2086

Merit: 4316

PyWallet (at least the "web" version) was indeed able to "edit" wallet.dat files... you could import and delete keys and addresses, in addition to the "dump" functionality.

source

I'm still confused by the character set used... it almost seems like Base64... except for that * character?!?? Huh

DaveF

legendary

Activity: 3500

Merit: 6320

Crypto Swap Exchange

Possibly a brainwallet?
I don't remember if they have the ability to add a password to the passphrase.
I'm on mobile at the moment at can't check.

Only other thought was some webwallet, since there used to be a lot of them out there.

-Dave

jojo18

newbie

Activity: 13

Merit: 6

Quote from: LoyceV on April 29, 2021, 02:56:20 PM

Quote from: jojo18 on April 29, 2021, 02:26:20 PM

So i needed to go to bitcoinadress.org and there copy adress and key then use pywallet to create wallet.dat file and insert it to bitcoin core wallet.

Did you import the private key into Bitcoin Core (bitcoin-qt)?
I'm not sure if pywallet can do this, it could be. But it sounds like you've used bit~~coin~~adress.org to create a private key. Maybe you're holding a brainwallet.

I can not remember Huh

I will try to remember and keep you up to date Wink

LoyceV

legendary

Activity: 3290

Merit: 16489

Thick-Skinned Gang Leader and Golden Feather 2021

Quote from: jojo18 on April 29, 2021, 02:26:20 PM

So i needed to go to bitcoinadress.org and there copy adress and key then use pywallet to create wallet.dat file and insert it to bitcoin core wallet.

Did you import the private key into Bitcoin Core (bitcoin-qt)?
I'm not sure if pywallet can do this, it could be. But it sounds like you've used bit~~coin~~adress.org to create a private key. Maybe you're holding a brainwallet.
Once you've recovered the private key, you can forget about pywallet and wallet.dat files and just choose which wallet to use.

jojo18

newbie

Activity: 13

Merit: 6

Ok i have rememberd something

So i needed to go to bitcoinadress.org and there copy adress and key then use pywallet to create wallet.dat file and insert it to bitcoin core wallet. But do not know what to do with recieved text

HCP

legendary

Activity: 2086

Merit: 4316

I honestly don't see how you could get a wallet.dat from only 76 chars... that seems highly unlikely Undecided

More likely that what you have is a single private key that has been encoded in some manner. The good news is that at least you have the password. The bad news is that you have no idea what encryption method has been used. Undecided

Quote from: jojo18 on April 28, 2021, 07:30:59 AM

No there is * at the end of the pass but there is no =

Text that starts "AAQ" and ends with a "*" doesn't sound like the "usual" Base64 encoding of ciphertext, as Base64 usually ends with "=" characters... not that it would really make any different, as even if it was Base64, there is still no way to know what the actual encryption algorithm was Undecided

jojo18

newbie

Activity: 13

Merit: 6

Quote from: LoyceV on April 28, 2021, 07:20:30 AM

Quote from: ?? on ??

The text has 76 signs. Starts with AAQ and has + sign. Also has upper and lower case and numbers and 12 charecters pass.

The "+" sounds like a signed message, but that would be 88 characters. Does it end on "="?

Example of a signature:

Quote from: LoyceV on April 18, 2019, 07:17:39 AM

GyW/J8h97Y4/8z9HbJEjT7ZYcq5OhrBc73m5MNle0iYPZT5yGXaSBHM+4lt/DGWrGs+swM6fHA4FaOWBTRyJVtg=

76+12=88! Coincidence?

Quote from: ?? on ??

Also what I remembered is with this text I somehow create wallet.dat file and then replace it in folder of Bitcoin core wallet.

As far as I know you can't create a wallet.dat file from text. It could be your password works on that wallet.dat, but in that case you definitely need to find the file.

Please edit your posts instead of making multiple posts in a row (see forum rules).

No there is * at the end of the pass but there is no =

Topic: Help to recover BTC (Read 388 times)