Topic: Help with extracting bitcoin core wallet (Read 199 times)

Hi pgizmo1,

I am interessted in helping to "guess" you wallet password.
To be clear I don't want your wallet.dat! and you should NOT sent it to anybody, as stated in the posts!

What I am interessted in is the hash e.g. $bitcoin$ you get from bitcoin2john.py

If you are interessted in, drop me an PM or email.

Bye

Awesome, glad to hear oh at least managed to open the wallet.


Do you at least remember how long the password was, what kind of characters you used (and did not use) in some positions, and other small details about it? While you wait for Dave to finish his work, you can extract the run hashcat on your computer. Use a large wordlist of common passwords if you don't remember anything about the password. You are only limited by CPU/GPU speed.

You are basically running a "dictionary attack" against your wallet file.

First install Python and then run this bitcoin2john.py script which will read the wallet file and will output a hash: https://raw.githubusercontent.com/magnumripper/JohnTheRipper/bleeding-jumbo/run/bitcoin2john.py

Open command prompt at the location of the bitcoin2john script and run:

Record the hash because you need it for hashcat.

We will use the RockYou wordlist of passwords, which you can download from https://github.com/praetorian-inc/Hob0Rules/blob/master/wordlists/rockyou.txt.gz extract it into the same folder as hashcat. (You may need to use 7-zip to extract it)

After you download and extract hashcat, open command prompt again and run


YOUR_PASSWORD_MASK lets you add letters and numbers and other characters at the end of each word, if you know you usually make passwords like that.

hashcat.exe -a 6 ...... ?a?a?a?a   This puts all combinations 4 characters at the end of all words
hashcat.exe -a 6 ...... ?a?a?l       Two characters of anything followed by a lowercase letter at the end.
hashcat.exe -a 6 ...... ?d?u?s        A digit followed by an uppercase letter followed by a symbol (includes space)

You can also combine masks to search for both kinds of combinations like this: hashcat.exe ..... ?a?a?a ?d?u?s

---

Try running this search:


(Make sure rockyou.txt is in the same folder as hashcat.exe)


This is going to search for passwords like qwerty1, qwerty12, qwerty123, qwerty- and qwerty-1 as well as with any other word in the RockYou list. They're sorta-common passwords that most people use. Good luck.


Beat me by one minute  

If you are going to use Walletrecoverservices I suggest you don't submit the wallet.dat instead submit the hash of your wallet.dat generated from bitcoin2john.py which is compatible with hashcat(brute-force). It's for your wallet safety and after they crack the hash they will give you the right password that you can use to unlock your wallet.

Did you submit the wallet.dat to Walletrecoveryservices? If not yet suggest you generate a hash of your wallet.dat.

Here's a simple guide on generating a hash of your wallet.dat(Make a few copies first of your wallet.dat)
- Install python 2.7
- Download bitcoin2john.py
- Make a folder and put bitcoin2john.py and wallet.dat in the same folder
- Now, open CMD on the same folder by holding shift+right-click or shift+f10
- Choose "Open Command Window Here"
- Then submit this command
It should generate the hash and then copy them that starts from "$bitcoin...." and paste them all to hash.txt

Now you have the hash you can submit it to Walletrecoveryservices or to anyone who can brute-force and find the right wallet.

I only made this for the safety of your wallet and honestly never use their service but there are some high trusted users here on the forum who said that it is a legit service.

If you want to crack the password with your own you can read the whole guide from this "Bitcoin2john.py cracking wallets

You make an effort to remember the password, write down all the possible combinations and test. But make sure that the account will not be terminated if you put a lot of different passwords.

Good luck

update...

that worked! I can see the wallet.. the balance... its all there... GREAT news...

now the bad... I do not remember the correct passphrase... I'm wrong on it.

I know I am close... but i dont remember if i capitalized certain words... Ive tried dozens of variable... nothing.

I contacted Dave at walletrecoveryservices... he says give him a few weeks...

in the mean time... what is the best recommendation for me on things I can try here?

I backed up the wallet... several times over.

Your wallet.dat file is still in the same location as it was before. That means after you reinstall bitcoin core, it should automatically find that wallet and make it available in the program under the name [default wallet]. There's nothing else you have to do (but regardless, I still advise making a copy of the wallet.dat file just in case something unexpectedly bad happens during installation.)

I forgot to mention, the first time you run bitcoin core, you should open command prompt and point it at the Program Files folder for Bitcoin Core. Then you should run bitcoin-qt.exe -rescan.

This is so that your copy of the wallet (I previously said blockchain but it's actually your wallet) is made up-to-date with the most recent transactions in the blocks you have downloaded so you can start using your wallet. You only have to do this once.

IN Dec 2015 I downloaded bitcoin core.

I created a wallet... I am 99.9% sure I know the passkey.

It was on a windows laptop, running 8.1

I installed bitcoin core, downloaded about half of the blockchain at that time... never finished.

I sent 2 btc to a wallet i created,  and sat it there. I was playing around and at the time it was not worth a ton, I forgot about it.

Since I gave the laptop to my kid... he went through and deleted a ton of stuff... almost everything... he deleted bitcoin core from the program files...

but he didn't do a restore or anything deep.

I went back and found several files in a folder c:   appdata/roaming/bitcoin

what is there is the following:

3 folders, blocks, chainstate , database
and the following files .lock , db.log  , debug.log  fee_estimates.dat  peers.dat and wallet.dat

as far as I can see, nothing else was deleted or changed.

the original bitcoin core install file is even still in the downloads.

what is the easiest way to go about getting the wallet address so I can get these btc?

should I reinstall bitcoin core on the laptop?

I just backed it all up... and saved those files to another folder and to a external.

I'd love a little $70k influx!

much thanks for any help.

As you explain, please treat me like a 6th grader... I am excellent at following directions, and know my way around a computer fairly well but not a computer programmer or genius by any means.