{"id":25759329,"url":"https://github.com/cyclone-github/solflare_pwn","last_synced_at":"2025-07-21T08:33:07.699Z","repository":{"id":277225125,"uuid":"931674521","full_name":"cyclone-github/solflare_pwn","owner":"cyclone-github","description":"Tools to recover, extract and decrypt Solflare wallets","archived":false,"fork":false,"pushed_at":"2025-02-22T16:13:14.000Z","size":36,"stargazers_count":1,"open_issues_count":0,"forks_count":1,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-05-13T02:49:45.622Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cyclone-github.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2025-02-12T17:08:53.000Z","updated_at":"2025-02-22T16:13:17.000Z","dependencies_parsed_at":"2025-05-13T02:36:14.605Z","dependency_job_id":"49951016-0712-45ad-af71-6d9d9bd3057f","html_url":"https://github.com/cyclone-github/solflare_pwn","commit_stats":null,"previous_names":["cyclone-github/solflare_pwn"],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/cyclone-github/solflare_pwn","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cyclone-github%2Fsolflare_pwn","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cyclone-github%2Fsolflare_pwn/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cyclone-github%2Fsolflare_pwn/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cyclone-github%2Fsolflare_pwn/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cyclone-github","download_url":"https://codeload.github.com/cyclone-github/solflare_pwn/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cyclone-github%2Fsolflare_pwn/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":266267290,"owners_count":23902334,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-02-26T17:30:13.223Z","updated_at":"2025-07-21T08:33:07.682Z","avatar_url":"https://github.com/cyclone-github.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"[![Readme Card](https://github-readme-stats.vercel.app/api/pin/?username=cyclone-github\u0026repo=solflare_pwn\u0026theme=gruvbox)](https://github.com/cyclone-github/solflare_pwn/)\n\n[![GitHub issues](https://img.shields.io/github/issues/cyclone-github/solflare_pwn.svg)](https://github.com/cyclone-github/solflare_pwn/issues)\n[![License](https://img.shields.io/github/license/cyclone-github/solflare_pwn.svg)](LICENSE)\n[![GitHub release](https://img.shields.io/github/release/cyclone-github/solflare_pwn.svg)](https://github.com/cyclone-github/solflare_pwn/releases)\n\n# Solflare Vault Extractor \u0026 Decryptor\n\n## Read here for more info about the \"xpass\" vulnerability discovered by cyclone which allows Solflare wallets to be decrypted without the wallet password: https://forum.hashpwn.net/post/416\n\n### POC tools to recover, extract and decrypt Solflare Vaults\n_**This toolset is proudly the first to announce support for Recovering Solflare Wallets**_\n- `Do to many of my GitHub projects being copied and sold -- which is in violation of their GPL v2.0 License -- I will not be releasing the source code for this project (yet).`\n- Contact me at https://forum.hashpwn.net/user/cyclone if you need help recovering your Solflare wallet password or seed phrase. \n\n### Solflare Vault location for Chrome extensions:\n- Linux: `/home/$USER/.config/google-chrome/Default/Local\\ Extension\\ Settings/bhhhlbepdkbapadjdnnojkbgioiodbic/`\n- Mac: `Library\u003eApplication Support\u003eGoogle\u003eChrome\u003eDefault\u003eLocal Extension Settings\u003ebhhhlbepdkbapadjdnnojkbgioiodbic`\n- Windows: `C:\\Users\\$USER\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\bhhhlbepdkbapadjdnnojkbgioiodbic\\`\n### Extractor usage example on test vault: (plaintext is \"cyclone\")\n```\n./solflare_extractor.bin bhhhlbepdkbapadjdnnojkbgioiodbic/\n ----------------------------------------------------- \n|        Cyclone's Solflare Vault Hash Extractor       |\n|        Use Solflare Vault Decryptor to decrypt       |\n|    https://github.com/cyclone-github/solflare_pwn    |\n ----------------------------------------------------- \n\nEncrypted Solflare Vault:\n$solflare$100000$a9ae805aef0936a0b48a77554601b948$b3b0fcbe4a36abfcdad97df8c5c3be4b633eaf4ee53d392f$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$d899e2192ab65116a19de312ed578d5d943ca5c46f68ba92be14807f931469688c67bb9e5812fdb3953599f13a0703e2ee9ba3849e358d74d91a6d61e0d0d454be17\n```\n### Decryptor usage example:\n```\n ----------------------------------------------- \n|       Cyclone's Solflare Vault Decryptor       |\n| https://github.com/cyclone-github/solflare_pwn |\n ----------------------------------------------- \n\nVault file:     hash.txt\nValid Vaults:   1\nCPU Threads:    16\nWordlist:       wordlist.txt\n2025/02/12 11:52:20 Working...\nHash: $solflare$100000$a9ae805aef0936a0b48a77554601b948$b3b0fcbe4a36abfcdad97df8c5c3be4b633eaf4ee53d392f$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\nPassword: cyclone\nSeed Phrase: daring rose clump noble element fork differ inform gravity turtle oven iron\n2025/02/12 11:52:35 Decrypted: 1/1 718.31 h/s 00h:00m:15s\n\n2025/02/12 11:52:35 Finished\n```\n### Decryptor exploit usage example:\n```\n ----------------------------------------------- \n|       Cyclone's Solflare Vault Decryptor       |\n| https://github.com/cyclone-github/solflare_pwn |\n ----------------------------------------------- \n\nVault file:     hash.txt\nValid Vaults:   1\nCPU Threads:    16\nMode:           xpass exploit\n2025/02/12 11:44:37 Working...\nHash: $solflare$100000$a9ae805aef0936a0b48a77554601b948$b3b0fcbe4a36abfcdad97df8c5c3be4b633eaf4ee53d392f$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$d899e2192ab65116a19de312ed578d5d943ca5c46f68ba92be14807f931469688c67bb9e5812fdb3953599f13a0703e2ee9ba3849e358d74d91a6d61e0d0d454be17\nPassword: No password needed, see https://forum.hashpwn.net/post/416\nSeed Phrase: daring rose clump noble element fork differ inform gravity turtle oven iron\n2025/02/12 11:44:37 Finished\n2025/02/12 11:44:37 Decrypted: 1/1 62.09 h/s 00h:00m:00s\n```\n### Decryptor supported options:\n```\n-w {wordlist} (omit -w to read from stdin)\n-h {solflare_wallet_hash}\n-o {output} (omit -o to write to stdout)\n-t {cpu threads}\n-s {print status every nth sec}\n\n-version (version info)\n-help (usage instructions)\n\n./solflare_decryptor.bin -h {solflare_wallet_hash} -w {wordlist} -o {output} -t {cpu threads} -s {print status every nth sec}\n\n./solflare_decryptor.bin -h solflare.txt -w wordlist.txt -o cracked.txt -t 16 -s 10\n\ncat wordlist | ./solflare_decryptor.bin -h solflare.txt\n\n./solflare_decryptor.bin -h solflare.txt -w wordlist.txt -o output.txt\n```\n\u003c!--\n### Compile from source:\n- This assumes you have Go and Git installed\n  - `git clone https://github.com/cyclone-github/solflare_pwn.git`\n  - solflare_extractor\n  - `cd solflare_pwn/solflare_extractor`\n  - `go mod init solflare_extractor`\n  - `go mod tidy`\n  - `go build -ldflags=\"-s -w\" .`\n  - solflare_decryptor\n  - `cd solflare_pwn/solflare_decryptor`\n  - `go mod init solflare_decryptor`\n  - `go mod tidy`\n  - `go build -ldflags=\"-s -w\" .`\n- Compile from source code how-to:\n  - https://github.com/cyclone-github/scripts/blob/main/intro_to_go.txt\n--\u003e\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcyclone-github%2Fsolflare_pwn","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcyclone-github%2Fsolflare_pwn","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcyclone-github%2Fsolflare_pwn/lists"}