solflare_pwn - Solflare Vault Extractor & Decryptor
-
Very interesting. Is the encryption algorithm the same as the old phantom wallet?
-
Proud to have worked with @cyclone on this, we will not be revealing exactly how it works for now.
Thanks, @rickyc2024, for bringing this wallet to my attention. It was a lot of fun working through it, and congrats for also figuring this one out and writing your own tooling for extracting / decrypting the wallet.
There's also a hidden "easter egg" that has been reported to Solflare that both rickyc2024 and I independently discovered.
Concerning the
solflare_pwntoolset. To clarify, it is solely my work, built from my own work with reverse engineering, cryptography and software development. There are zero lines of code in the toolset that came, or were influenced by, any other source.Sysadmin by day | Hacker by night | Go Dev | hashpwn
3x RTX 4090 3x RTX 2080ti
Forum Rules -
hi! @cyclone WIll you gonna upload solflare solution? https://github.com/cyclone-github/solflare_pwn
-
hi! @cyclone WIll you gonna upload solflare solution? https://github.com/cyclone-github/solflare_pwn
@secretscribe1
solflare_extractortool has been released on GitHub. DM me if you need help recovering a Solflare wallet.
https://github.com/cyclone-github/solflare_pwn/releases -
FYI
Solflare Crypto Wallet Vulnerability - xpass exploit
https://forum.hashpwn.net/post/416Sysadmin by day | Hacker by night | Go Dev | hashpwn
3x RTX 4090 3x RTX 2080ti
Forum Rules -
New GitHub Release:
Solflare Wallet Extractor and Decryptor compiled binaries have both been posted on GitHub.Note, I am not publicly releasing the xpass exploit logic with the decryptor. If you have forgotten your Solflare password and cannot recover it with the decryptor on GitHub, send me a DM.
Solflare Vault Extractor v0.1.0:
Solflare Vault Decryptor v0.1.1:
https://github.com/cyclone-github/solflare_pwn/releasesSysadmin by day | Hacker by night | Go Dev | hashpwn
3x RTX 4090 3x RTX 2080ti
Forum Rules -
New GitHub Release:
Solflare Wallet Extractor and Decryptor compiled binaries have both been posted on GitHub.Note, I am not publicly releasing the xpass exploit logic with the decryptor. If you have forgotten your Solflare password and cannot recover it with the decryptor on GitHub, send me a DM.
Solflare Vault Extractor v0.1.0:
Solflare Vault Decryptor v0.1.1:
https://github.com/cyclone-github/solflare_pwn/releases -
@cyclone Hi cyclone, could you help me in decrypting the wallet, I don't understand how to open the code from github
@pirozhok You'll need to run the extractor and decryptor from terminal since they are CLI tools. This is similar to how you would run most hash cracking tools such as hashcat, mdxfind, john, etc.
There are usage examples on the OP above and GitHub readme. Before tackling your own Solflare wallet, try recovering the password and seed phrase from the test hash.
https://forum.hashpwn.net/post/404 -
solflare_pwnv0.3.1 released- includes xpass exploit, details here: https://forum.hashpwn.net/post/11116
https://github.com/cyclone-github/solflare_pwn/releases/tag/v0.3.1
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login