Cracking Bitcoin/Litecoin wallet hashes
As we have done in previous chapters, we can take the hash seen previously and save it into a file. We will call our bitcoin.hash, as seen in Figure 10.5:
Figure 10.5 – wallet.dat extracted hash saved to a file called bitcoin.hash
Both John and hashcat support cracking extracted Bitcoin and Litecoin passphrases. Let’s start with John. We can call John using a wordlist and the file containing the hash, using the format:
john bitcoin.hash ––wordlist=rockyou.txt
This is shown in Figure 10.6:
Figure 10.6 – John being run against the bitcoin.hash file
We see here that John has reliably (and quickly) cracked the hash associated with this Bitcoin wallet, and that it was set with a password of password – not the best choice but fair enough for demonstration purposes. While John notes in its output that the hash matches a couple of formats, it was...
