RandstormBTC / randstorm

Bitcoin Randstorm Exploit - Very Fast Private Key and Address Generator
44 stars 20 forks source link

Random generator #17

Open xeroxtheprintlord opened 6 months ago

xeroxtheprintlord commented 6 months ago

As it stands, the random generator implemented in the script is not even close to Math.random function that was used in JS. You are using random.randit and that drastically differs from the Math.random.

Also, you are generating 1 hex key per seed, not knowing what values were generated by math.random before the output was thrown into Arcfour with the seed.

demonluca commented 6 months ago

As it stands, the random generator implemented in the script is not even close to Math.random function that was used in JS. You are using random.randit and that drastically differs from the Math.random.

Also, you are generating 1 hex key per seed, not knowing what values were generated by math.random before the output was thrown into Arcfour with the seed.

Interesting do you think it’s possible to fix? If your on telegram we’ve got a group discussion going your more than welcome to join https://t.me/+2Drmjbwu8fk1MjQ0

XorkrX commented 5 months ago

generating random numbers through "class SecureRandom" and provision of seed value can create deterministic result. means we can get same result of random numbers for same seed value and then our PRIZE also if we are lucky in finding correct seed value. But then main issue is this code will work only if any vulnerable site used same process as "class SecureRandom" (finding or guessing exact creation date as seed time is next distant step). So the code will be different for each site ?

demonluca commented 5 months ago

generating random numbers through "class SecureRandom" and provision of seed value can create deterministic result. means we can get same result of random numbers for same seed value and then our PRIZE also if we are lucky in finding correct seed value. But then main issue is this code will work only if any vulnerable site used same process as "class SecureRandom" (finding or guessing exact creation date as seed time is next distant step). So the code will be different for each site ?

Hi if you want to discuss with others you can join us on telegram https://t.me/+2LNzborOVN1iOGI0

JOHNNYMOULAND commented 5 months ago

@XorkrX Hey pal, can you take 5 minutes and help me with this. If i know the exact EPOCH time that my wallet was created, can i seed the math.random 3 source number generator to reveal my seed, which i can then figure out my ETH Private key/? Thank you in advance.