Cracking Ethereum wallet hashes

Let’s take the output of ethereum2john and save it to a file. In this case, we’ll call it ether.hash, as shown in Figure 10.15:

Figure 10.15 – Output of ether.hash

Both John and hashcat support cracking this passphrase – let’s start with John. As before, we will call John and pass the wordlist and the hash, using the following format:

john ether.hash ––wordlist=rockyou.txt

This is shown in Figure 10.16:

Figure 10.16 – Output of John run against ether.hash

Success! We can see the passphrase set for this wallet was password. Now let’s move on to hashcat. We need to identify the correct mode for cracking with hashcat, so let’s look at the hashcat help output, and grep for Ethereum:

hashcat -h | grep Ethereum

This is shown in Figure 10.17:

Figure 10.17 – Output of the `hashcat -h | grep...