phantom_pwn - Phantom Vault Extractor & Decryptor

[cyclone]

@billyjon123 I recognize your username from GitHub. DM sent.

[cryptuhstonks]

Hi Cyclone,

Thanks for creating this tool. It looks like I've almost got it but not quite. I get "Error opening Vault" but It did spit out a hash and I manged to get the hash into a txt document. The only problem is it can't decrypt. I'm assuming there is something I'm doing wrong or the vault I'm trying to access is corrupted. I also tried with your test hash and wasn't able to decrypt that either. I'm on macos. Sequoia. Once again thank you for your time, any help would be appreciated.

[cyclone]

@cryptuhstonks Read through this GitHub issue and DM me if you run into any snags.
https://github.com/cyclone-github/phantom_pwn/issues/14#issuecomment-2613081472

[cyclone]

Updated source code of phantom_extractor v0.3.3-2025-02-04 has been uploaded which now supports hashcat modes 30010, 26650 and 26651. While those hashcat kernels are not publicly released, the tool can be used to extract Phantom wallets for them.

[John]

@cyclone said in phantom_pwn - Phantom Vault Extractor & Decryptor:

30010, 26650 and 26651

Without these cores the program won't work? I understand it works in conjunction with hashcat?

[cyclone]

@John phantom_extractor extracts the Phantom wallet vault into compatible hashes for either phantom_decryptor or hashcat modes 30010, 26650, 26651. Keep in mind, I do not own those hashcat kernels, so if you need them, you'll have to purchase them directly from the developers.

[ar7s]

Hey my ffriend! thanks for that tool, you are awesome. Can you please help me a little bit? i have done almost everything but im not sure if i need to know my password in order to unlock the wallet or to recover the seed phrse.

thanks in advance

[ar7s]

hey there, where can i dm you

[cyclone]

@ar7s DM sent.

[rickyc2024]

@cyclone I wanted to speak with you about your vault decryptors. I am currently working on a vault decryptor for solflare wallet but I have had some issues with decrypting the vault data with secretbox as it dosen't seem to be encrypted with the wallet password. Can we speak in dms?

[rickyc2024]

I also noticed that the structure of solflare vault data is almost identical to the structure of phantom but it doesn't seem to be using the wallet password.

[cyclone]

@rickyc2024 DM sent.

[shinexyz]

Hi! thank you so much for this. I am super beginner, only started code with the help of claude recently...

I am trying to crack my own phantom wallet that I forgot the password (didn't write down the seed phrases... ). I have some clue on certain words that the password may contain (not sure either, but trying)

do I need both decryptor and extractor or just decryptor?

I managed to install GO and created exe file for windows (go build?) but when I tried with Key.txt (extracted from wallet), it didn't work..
(I tested on the phantom wallet which I know the password of, and used a random word list with the actual pass word inside) Any idea why this would be the case? Thanks so much!

[cyclone]

@shinexyz You'll need to first run phantom_extractor to extract the vault hash, then run phantom_decryptor with that hash and wordlist containing password candidates. Try cracking the example hash first to verify you've got everything figured out and working.

[pavmojer]

Hi I saw this post from github
@cyclone , could you tell me about this project?
Can I recover my seed or password?

[cyclone]

@pavmojer
Phantom crypto wallet passwords recoverable with my phantom_pwn toolset. The seed phrase is also recoverable once the password has been recovered, but is a multi-step process as described on my GitHub writeup.

Read through this GitHub issue (walkthrough) and DM me if you run into any snags.
https://github.com/cyclone-github/phantom_pwn/issues/14#issuecomment-2613081472