View Issue Details

IDProjectCategoryView StatusLast Update
0007781Kali LinuxNew Tool Requestspublic2022-07-06 04:50
Reportermrudnitsky Assigned ToGamb1t  
PrioritynormalSeverityminorReproducibilityN/A
Status closedResolutionwon't fix 
Product Version2022.2 
Summary0007781: Ethereum Wallet Cracker - A script to steal Ether from wallets suffering from insufficient entropy during key generation.
Description

[Name]
Ethereum Wallet Cracker

[Version]
1.2.0

[Homepage]
https://github.com/mrudnitsky/ethereum-wallet-cracker/
https://pypi.org/project/ethereum-wallet-cracker/

[Download]
https://github.com/mrudnitsky/ethereum-wallet-cracker/releases/tag/1.2.0
https://pypi.org/project/ethereum-wallet-cracker/

[Author]
Mark Rudnitsky

[Licence]
GPLv3

[Description]
A script to steal Ether from wallets suffering from insufficient entropy during key generation.

At a high level, this script does the following:

  • Pulls entropy from all files in a given directory (normally pointed to a wordlist directory like Kali's '/usr/share/wordlists/')
  • Creates an Ethereum wallet from each unit of entropy
  • Saves the public and private keys of this new wallet into a CSV file for future use
  • Checks the balance of the new wallet
  • If the balance is greater than zero, transfers the balance to our predefined wallet

[Dependencies]
pip packages as follows:
eth_account>=0.5.8
eth_utils>=1.10.0
web3>=5.29.2

[Similar tools]
Address generation (without security analysis) (GitHub): SjorsO/keys-generator, bokub/vanity-eth
Ethereum security (without entropy checks) (GitHub): muellerberndt/scrooge-mcetherface, cleanunicorn/Theo, palkeo/pakala

[Activity]
Project start date: June 27, 2022
Actively being deployed: Yes

[How to install]
Preferred - release page on Github (https://github.com/mrudnitsky/ethereum-wallet-cracker/releases)
Backup - 'pip install ethereum-wallet-cracker'

[How to use]
'python3 ethereum-wallet-cracker.py' is the only command needed.

Upon first execution, the app will walk the user through setting configuration variables. Users will need to manually specify a recipient wallet address, an Infura API key, and the source of entropy (usually a directory of wordlists like Kali's /usr/share/wordlists), among other items. All other times, the program is set-and-forget, excellent for running in tmux or as a background process.

[Packaged]
If Debian can run Python 3 and use pip, no packaging is required. It's a single Python script file.

Activities

Gamb1t

Gamb1t

2022-07-06 04:50

reporter   ~0016359

Thanks for the suggestion, but this tool wouldn't be used on a pentest.

Issue History

Date Modified Username Field Change
2022-07-02 23:51 mrudnitsky New Issue
2022-07-06 04:50 Gamb1t Assigned To => Gamb1t
2022-07-06 04:50 Gamb1t Status new => closed
2022-07-06 04:50 Gamb1t Resolution open => won't fix
2022-07-06 04:50 Gamb1t Note Added: 0016359