Metamask Vault Decryption

[citizenblanco]

Hi - https://forum.hashpwn.net/topic/50/metamask_pwn-metamask-vault-extractor-decryptor - saw this great article. I'm trying to use Metamask's walkthrough on extracting my recovery phrase, and I'm noticing that my LDB file doesn't match Metamask's walkthrough. So i'm having trouble adding Data/salt to the code. Do any of these tools here help with this?

[cyclone]

You'll first need to compile the source code, run the extractor, then the decryptor.

Are you getting an output when running metamask_extractor? You'll need to run metamask_extractor and include the full path to your Metamask wallet extension.
Examples (you'll need to change this to match your local paths).

Linux:

./metamask_extractor.bin /home/$USER/.config/google-chrome/Default/Local\ Extension\ Settings/nkbihfbeogaeaoehlefnkodbefgpgknn/

Windows:

.\metamask_extractor.exe "C:\Users\$USERNAME\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgkn"

[citizenblanco]

Is the extractor a program i download, or code i run? Im not a coder FYI, just someone super motivated and can follow directions

[cyclone]

The extractor and decryptor are programs that you can either compile from source code yourself, or download the compiled binaries from the latest release on GitHub. Your choice. Ultimately, you need to run metamask_extractor like I mentioned in my previous reply.
Source code:
https://github.com/cyclone-github/metamask_pwn
Latest Release:
https://github.com/cyclone-github/metamask_pwn/releases

Note: if you're running the decryptor on Windows, keep this known issue in mind as it will cause false negatives. This doesn't affect Linux or Mac.
https://github.com/cyclone-github/metamask_pwn/issues/1

[citizenblanco]

Thank you for this help.

To your earlier question, i did not get an output from the metamask extractor. I compiled the source code, got to this step:
go build -ldflags="-s -w" metamask_extractor.go

I type that in and it doesnt do anything. Is that where I put in the Metamask wallet extension, and if so, what format? I couldn't find that part.

Appreciate this! Feels like im close.

[cyclone]

Make sure you've followed these steps in this order:

1. Download binaries
   a. If you're comfortable with compiling from source code and running terminal commands like git clone and go build, feel free to do so.
   b. If not, I recommend downloading the latest pre-compiled binaries under Releases.
2. Run metamask_extractor
3. Run metamask_decryptor

All of the instructions on how to do this are included in the GitHub metamask_pwn README.

If you still can't figure things out, send me a DM and I'll walk you through the process.

[trevorgreer9312]

@cyclone I need your help to crack my old Metamask Wallet...
Could you guide me how to crack it? I've learned how to use Hashcat and how to extract the hash from the wallet.

I want to send you a DM.