search

gurnec / btcrecover

An open source Bitcoin wallet password and seed recovery tool designed for the case where you already know most of your password/seed, but need assistance in trying different possible combinations.
GNU General Public License v2.0
1.29k stars 691 forks source link

Brute force private key from Multibit with correct password #121

Open vamosrafa opened 7 years ago

vamosrafa commented 7 years ago

I know this is a long shot, but somehow Multibit classic appears to have saved the private key in a weird format, not sure if there is a way to have BTCrecover attempt to brute force the actual private key with the correct password as the correct input.

I am offering a bounty of 2.5BTC for help in retrieving the private key.

Specifics are available here towards the bottom. https://github.com/Multibit-Legacy/multibit/issues/620

kost123 commented 7 years ago

What do you mean by weird format? you mean encrypted? A .key file can be encrypted in aes256..

gurnec commented 7 years ago

vamosrafa, you may have noticed, but I've been following that issue (and commented on it a bit) for quite a while. Unfortunately, despite trying to figure it out, I have no idea what the underlying issue is or how to fix it, sorry....

I assume you've already tried to use openssl to decrypt the .key file as suggested in the thread? Do you only have a single .key file saved (often, MultiBit Classic saves more than one)? Only a single wallet file also (again, I think MultiBit saves more than one)?

cryptoful commented 6 years ago

Try using multibit classic to open the wallet.cipher file in the unenc-backup folder. Also, you can try this: https://github.com/Multibit-Legacy/read-multibit-wallet-file

vamosrafa commented 6 years ago

@cryptoful yes opening the cipher files do nothing unfortunately.

@gurnec yes, you have been very helpful, there is some BTC in it for you one day if I get the wallet opened. There are other backups but I think they all got borked by some weird error. The wallets load the correct balance, but the password will not unlock them. The multibit recovery software outputs a 94 character private key for me and someone else with the same problem.

Part of the problem is the ego of the original Multibit developers got in the way, and they assured me that the password was wrong, so I didn't go the file recovery software route when I had the chance. Now three years later, they are like, yeah, you're probably screwed sorry mate, I've moved on.

kost123 commented 6 years ago

Add me on skype, petr5476, we can go over it, can't guarentee anything.

rterwedo commented 6 years ago

@vamosrafa I am not super familiar with Multibit, but we just went down this with a old core wallet. In that case, the original unencrypted priv keys were still stored in the wallet file (despite it saying they weren't) and we had to go byte byte to search for them. We were able to get ~50% of the priv keys out this way. We also wrote some recovery software to scan drives byte by byte looking for keys - not sure if our process can help but can share our feedback if wanted.

Most likely the bytes would be different but the process could be similar

Autoband86 commented 6 years ago

@vamosrafa, I think you have not been able to recover your coins yet? I am also looking into the problem again, it is starting to nag me a lot. What I am wondering is why the files got corrupted in the first place, and if it is via a specific mechanism. I wonder if it has something to do with the system, or how java works. Are you working on a mac?

Autoband86 commented 6 years ago

Another question, did you also update your multibit version in between making the wallet and trying to unlock it again?

vamosrafa commented 6 years ago

@Autoband86 I was on windows but may have updated multibit and then the wallet would not unlock. IIRC

keychainx commented 3 years ago

Did you try unlocking yourself using hashcat and rules? Ive recently opened multiple old multibit where owner claimed to have the correct password, as it turns out it was a typo