Skip to content
  • Categories
  • Recent
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Slate)
  • No Skin
Collapse
Brand Logo

hashpwn

Home | Donate | GitHub | Matrix Chat | PrivateBin | Rules

  1. Home
  2. Tools
  3. Hash Cracking
  4. solflare_pwn - Solflare Vault Extractor & Decryptor

solflare_pwn - Solflare Vault Extractor & Decryptor

Scheduled Pinned Locked Moved Hash Cracking
14 Posts 6 Posters 2.3k Views 5 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • oe3p32wedwO Offline
    oe3p32wedwO Offline
    oe3p32wedw
    Contributor
    wrote on last edited by
    #2

    Very interesting. Is the encryption algorithm the same as the old phantom wallet?

    1x1660 Ti | 2x4090 | epileptic/anxiety/despair/drain | hashpwn <3

    cycloneC 1 Reply Last reply
    0
    • oe3p32wedwO oe3p32wedw

      Very interesting. Is the encryption algorithm the same as the old phantom wallet?

      cycloneC Offline
      cycloneC Offline
      cyclone
      Admin Trusted
      wrote on last edited by
      #3

      @oe3p32wedw Both use nacl/secretbox encryption with a pbkdf2-sha256 KDF, but with a few nuances such as encoding and iterations.

      Sysadmin by day | Hacker by night | Go Dev | hashpwn
      3x RTX 4090 3x RTX 2080ti
      Forum Rules

      1 Reply Last reply
      1
      • R Offline
        R Offline
        rickyc2024
        Banned
        wrote on last edited by
        #4

        Proud to have worked with @cyclone on this, we will not be revealing exactly how it works for now.

        cycloneC 1 Reply Last reply
        0
        • R rickyc2024

          Proud to have worked with @cyclone on this, we will not be revealing exactly how it works for now.

          cycloneC Offline
          cycloneC Offline
          cyclone
          Admin Trusted
          wrote on last edited by
          #5

          Thanks, @rickyc2024, for bringing this wallet to my attention. It was a lot of fun working through it, and congrats for also figuring this one out and writing your own tooling for extracting / decrypting the wallet.

          There's also a hidden "easter egg" that has been reported to Solflare that both rickyc2024 and I independently discovered.

          Concerning the solflare_pwn toolset. To clarify, it is solely my work, built from my own work with reverse engineering, cryptography and software development. There are zero lines of code in the toolset that came, or were influenced by, any other source.

          Sysadmin by day | Hacker by night | Go Dev | hashpwn
          3x RTX 4090 3x RTX 2080ti
          Forum Rules

          1 Reply Last reply
          👍
          0
          • S Offline
            S Offline
            secretscribe1
            wrote on last edited by
            #6

            hi! @cyclone WIll you gonna upload solflare solution? https://github.com/cyclone-github/solflare_pwn

            cycloneC 1 Reply Last reply
            0
            • S secretscribe1

              hi! @cyclone WIll you gonna upload solflare solution? https://github.com/cyclone-github/solflare_pwn

              cycloneC Offline
              cycloneC Offline
              cyclone
              Admin Trusted
              wrote on last edited by
              #7

              @secretscribe1 solflare_extractor tool has been released on GitHub. DM me if you need help recovering a Solflare wallet.
              https://github.com/cyclone-github/solflare_pwn/releases

              Sysadmin by day | Hacker by night | Go Dev | hashpwn
              3x RTX 4090 3x RTX 2080ti
              Forum Rules

              1 Reply Last reply
              0
              • cycloneC Offline
                cycloneC Offline
                cyclone
                Admin Trusted
                wrote on last edited by cyclone
                #8

                FYI
                Solflare Crypto Wallet Vulnerability - xpass exploit
                https://forum.hashpwn.net/post/416

                Sysadmin by day | Hacker by night | Go Dev | hashpwn
                3x RTX 4090 3x RTX 2080ti
                Forum Rules

                1 Reply Last reply
                👍
                0
                • cycloneC Offline
                  cycloneC Offline
                  cyclone
                  Admin Trusted
                  wrote on last edited by
                  #9

                  New GitHub Release:
                  Solflare Wallet Extractor and Decryptor compiled binaries have both been posted on GitHub.

                  Note, I am not publicly releasing the xpass exploit logic with the decryptor. If you have forgotten your Solflare password and cannot recover it with the decryptor on GitHub, send me a DM.

                  Solflare Vault Extractor v0.1.0:
                  Solflare Vault Decryptor v0.1.1:
                  https://github.com/cyclone-github/solflare_pwn/releases

                  Sysadmin by day | Hacker by night | Go Dev | hashpwn
                  3x RTX 4090 3x RTX 2080ti
                  Forum Rules

                  P 1 Reply Last reply
                  👍
                  1
                  • cycloneC cyclone

                    New GitHub Release:
                    Solflare Wallet Extractor and Decryptor compiled binaries have both been posted on GitHub.

                    Note, I am not publicly releasing the xpass exploit logic with the decryptor. If you have forgotten your Solflare password and cannot recover it with the decryptor on GitHub, send me a DM.

                    Solflare Vault Extractor v0.1.0:
                    Solflare Vault Decryptor v0.1.1:
                    https://github.com/cyclone-github/solflare_pwn/releases

                    P Offline
                    P Offline
                    pirozhok
                    wrote on last edited by
                    #10

                    @cyclone Hi cyclone, could you help me in decrypting the wallet, I don't understand how to open the code from github

                    cycloneC 1 Reply Last reply
                    0
                    • P pirozhok

                      @cyclone Hi cyclone, could you help me in decrypting the wallet, I don't understand how to open the code from github

                      cycloneC Offline
                      cycloneC Offline
                      cyclone
                      Admin Trusted
                      wrote on last edited by
                      #11

                      @pirozhok You'll need to run the extractor and decryptor from terminal since they are CLI tools. This is similar to how you would run most hash cracking tools such as hashcat, mdxfind, john, etc.

                      There are usage examples on the OP above and GitHub readme. Before tackling your own Solflare wallet, try recovering the password and seed phrase from the test hash.
                      https://forum.hashpwn.net/post/404

                      Sysadmin by day | Hacker by night | Go Dev | hashpwn
                      3x RTX 4090 3x RTX 2080ti
                      Forum Rules

                      1 Reply Last reply
                      0
                      • S Offline
                        S Offline
                        Senses
                        wrote on last edited by
                        #12

                        Hi, Cyclone. Can you tell me how to run in mode: xpass exploit?

                        cycloneC 1 Reply Last reply
                        0
                        • S Senses

                          Hi, Cyclone. Can you tell me how to run in mode: xpass exploit?

                          cycloneC Offline
                          cycloneC Offline
                          cyclone
                          Admin Trusted
                          wrote on last edited by
                          #13

                          @Senses DM me on Matrix.

                          Sysadmin by day | Hacker by night | Go Dev | hashpwn
                          3x RTX 4090 3x RTX 2080ti
                          Forum Rules

                          1 Reply Last reply
                          0
                          • cycloneC Offline
                            cycloneC Offline
                            cyclone
                            Admin Trusted
                            wrote last edited by
                            #14

                            solflare_pwn v0.3.1 released

                            • includes xpass exploit, details here: https://forum.hashpwn.net/post/11116

                            https://github.com/cyclone-github/solflare_pwn/releases/tag/v0.3.1

                            Sysadmin by day | Hacker by night | Go Dev | hashpwn
                            3x RTX 4090 3x RTX 2080ti
                            Forum Rules

                            1 Reply Last reply
                            0

                            Hello! It looks like you're interested in this conversation, but you don't have an account yet.

                            Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

                            With your input, this post could be even better 💗

                            Register Login
                            Reply
                            • Reply as topic
                            Log in to reply
                            • Oldest to Newest
                            • Newest to Oldest
                            • Most Votes


                            homogenous-expeditionary
                            • Login

                            • Don't have an account? Register

                            • Login or register to search.
                            • First post
                              Last post
                            0
                            • Categories
                            • Recent