Metamask Bruteforcer
by - Thursday, January 1, 1970 at 12:00 AM
If you have some up to date, please share these are trash (or all others I could find):

https://github.com/pctripsesp/metamask_bruteforce

https://github.com/notaSWE/metamaskbrute

Linux CLI only no windows, no selenium bullshit.
Reply
Are you looking for a mnemonic seed phrase "guesser" essentially? You don't really need metamask for that, there are some projects on github, but odds are you aren't gonna find anything

Edit: There are around 71 million ethereum adresses which have a balance (source: https://decrypt.co/89486/number-of-non-zero-ethereum-addresses-record-high-71-million-glassnode), there are a total of 2048^24 (~3 * 10^79) different wallets generatable from a mnemonic seed. Thats a 3 with 79 zeros at the end. Very unlikely you'll find anything
Reply
(November 16, 2022, 12:10 AM)der3kxd Wrote: Are you looking for a mnemonic seed phrase "guesser" essentially? You don't really need metamask for that, there are some projects on github, but odds are you aren't gonna find anything

Edit: There are around 71 million ethereum adresses which have a balance (source: https://decrypt.co/89486/number-of-non-zero-ethereum-addresses-record-high-71-million-glassnode), there are a total of 2048^24 (~3 * 10^79) different wallets generatable from a mnemonic seed. Thats a 3 with 79 zeros at the end. Very unlikely you'll find anything


No I looking for what I said not generator bullshits.

I got some metamasks, encrypted ldb files storing the private keys protected by a password I would like to break those with wordlists/bruteforce.

I'm not interested in some high level lame automation like selenium which essentially emulates what you would do with the browser try a password in the field. That would take forever.
Reply
(November 16, 2022, 04:53 PM)eatcake Wrote:
(November 16, 2022, 12:10 AM)der3kxd Wrote: Are you looking for a mnemonic seed phrase "guesser" essentially? You don't really need metamask for that, there are some projects on github, but odds are you aren't gonna find anything

Edit: There are around 71 million ethereum adresses which have a balance (source: https://decrypt.co/89486/number-of-non-zero-ethereum-addresses-record-high-71-million-glassnode), there are a total of 2048^24 (~3 * 10^79) different wallets generatable from a mnemonic seed. Thats a 3 with 79 zeros at the end. Very unlikely you'll find anything


No I looking for what I said not generator bullshits.

I got some metamasks, encrypted ldb files storing the private keys protected by a password I would like to break those with wordlists/bruteforce.

I'm not interested in some high level lame automation like selenium which essentially emulates what you would do with the browser try a password in the field. That would take forever.


Sorry, I misunderstood, I thought you were looking for code *like* the ones you linked.
If you want to crack metamask encrypted vault you can use hashcat! Check here https://hashcat.net/wiki/doku.php?id=example_hashes search for 26600 :)
Format is $metamask$[salt]$[iv]$[data]
Reply
(November 16, 2022, 04:53 PM)eatcake Wrote:
(November 16, 2022, 12:10 AM)der3kxd Wrote: Are you looking for a mnemonic seed phrase "guesser" essentially? You don't really need metamask for that, there are some projects on github, but odds are you aren't gonna find anything

Edit: There are around 71 million ethereum adresses which have a balance (source: https://decrypt.co/89486/number-of-non-zero-ethereum-addresses-record-high-71-million-glassnode), there are a total of 2048^24 (~3 * 10^79) different wallets generatable from a mnemonic seed. Thats a 3 with 79 zeros at the end. Very unlikely you'll find anything


No I looking for what I said not generator bullshits.

I got some metamasks, encrypted ldb files storing the private keys protected by a password I would like to break those with wordlists/bruteforce.

I'm not interested in some high level lame automation like selenium which essentially emulates what you would do with the browser try a password in the field. That would take forever.

Did you get those files with a stealer?

I made a stealer which grabs passwords from the Chrome/Mozilla folders, and now that I think about it, what you did is something I could easily add into my malware.

I'm assuming these ldb files are stored locally and the password too, have you searched what encryption Metamask uses? It is open source code, so it should be a google search away. After you've found how the encryption is done it should be a matter of using hashcat and a powerfully GPU/VPS.

Also, going on a tangent here, would you or anyone else know how cookie stealing works? I've tried copying and pasting my gmail cookies into an anonymous window and it doesn't work, I don't get logged in.

Is there any special procedure to steal cookies/inject them into the browser?
Reply


 Users viewing this thread: Metamask Bruteforcer: No users currently viewing.