{"id":26517045,"url":"https://github.com/picta-lab/phantom-decrypt","last_synced_at":"2025-03-21T08:17:51.416Z","repository":{"id":282715399,"uuid":"949431488","full_name":"picta-lab/phantom-decrypt","owner":"picta-lab","description":"Tools to recover, extract and decrypt Phantom wallets","archived":false,"fork":false,"pushed_at":"2025-03-16T14:04:27.000Z","size":30,"stargazers_count":1,"open_issues_count":0,"forks_count":1,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-03-16T14:27:33.162Z","etag":null,"topics":["chrome","decrypt","decryptor","extension","extract","phantom","recovery","wallet"],"latest_commit_sha":null,"homepage":"https://t.me/pictalab","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/picta-lab.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2025-03-16T13:00:35.000Z","updated_at":"2025-03-16T14:04:30.000Z","dependencies_parsed_at":"2025-03-16T14:28:14.123Z","dependency_job_id":"60756b0d-d3d1-42c5-aa41-22da95e8aa03","html_url":"https://github.com/picta-lab/phantom-decrypt","commit_stats":null,"previous_names":["picta-lab/phantom-decrypt"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/picta-lab%2Fphantom-decrypt","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/picta-lab%2Fphantom-decrypt/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/picta-lab%2Fphantom-decrypt/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/picta-lab%2Fphantom-decrypt/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/picta-lab","download_url":"https://codeload.github.com/picta-lab/phantom-decrypt/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":244759961,"owners_count":20505716,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["chrome","decrypt","decryptor","extension","extract","phantom","recovery","wallet"],"created_at":"2025-03-21T08:17:50.767Z","updated_at":"2025-03-21T08:17:51.400Z","avatar_url":"https://github.com/picta-lab.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"\n# 🚀 Phantom Vault Extractor \u0026 Decryptor\nThe Phantom Vault Extactor and decryptor is the first tool to recover, extract and decrypt Phantom wallet Vaults\n## ✨ Features\n- extract encrypted key\n- decrypt encrypted main key\n- use main key to decrypt other crypted json\n- Contact me at https://t.me/pictalab if you need help recovering your Phantom wallet password or seed phrase.\n\n\n### Phantom vault location for Chrome extensions:\n- Linux: `/home/$USER/.config/google-chrome/Default/Local\\ Extension\\ Settings/bfnaelmomeimhlpmgjnjophhpkkoljpa/`\n- Mac: `Library\u003eApplication Support\u003eGoogle\u003eChrome\u003eDefault\u003eLocal Extension Settings\u003ebfnaelmomeimhlpmgjnjophhpkkoljpa`\n- Windows: `C:\\Users\\$USER\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\bfnaelmomeimhlpmgjnjophhpkkoljpa\\`\n\n## 📋 Usage\n### Extractor usage example on test vault: (plaintext is `password`)\n* Old pbkdf2 KDF\n```\nphantom_extractor.exe bfnaelmomeimhlpmgjnjophhpkkoljpa/\n ----------------------------------------------------- \n|       Picta Lab's Phantom Vault Hash Extractor      |\n|        Use Phantom Vault Decryptor to decrypt       |\n|    https://github.com/picta-lab/phantom-decrypt     |\n ----------------------------------------------------- \n{\"encryptedKey\":{\"digest\":\"sha256\",\"encrypted\":\"5pLvA3bCjNGYBbSjjFY3mdPknwFfp3cz9dCBv6izyyrqEhYCBkKwo3zZUzBP44KtY3\",\"iterations\":10000,\"kdf\":\"pbkdf2\",\"nonce\":\"NZT6kw5Cd5VeZu5yJGJcFcP24tnmg4xsR\",\"salt\":\"A43vTZnm9c5CiQ6FLTdV9v\"},\"version\":1}\n ----------------------------------------------------- \n|          hashcat -m 30010 hash (pbkdf2 kdf)         |\n ----------------------------------------------------- \n$phantom$SU9HoVMjb1ieOEv18nz3FQ==$7H29InVRWVbHS4WcBJdTay0ONb4mLX9Q$g0vJAbflhH4jJJDvuv7Ar5THgzBmJ8tt6oajsQZd/dSXNNjcY5/0eGeF5c1NW1WU\n ----------------------------------------------------- \n|          hashcat -m 26651 hash (pbkdf2 kdf)         |\n ----------------------------------------------------- \nPHANTOM:10000:SU9HoVMjb1ieOEv18nz3FQ==:7H29InVRWVbHS4WcBJdTay0ONb4mLX9Q:g0vJAbflhH4jJJDvuv7Ar5THgzBmJ8tt6oajsQZd/dSXNNjcY5/0eGeF5c1NW1WU\n```\n* New scrypt KDF\n```\nphantom_extractor.exe bfnaelmomeimhlpmgjnjophhpkkoljpa/\n ----------------------------------------------------- \n|        Picta-lab's Phantom Vault Hash Extractor    |\n|        Use Phantom Vault Decryptor to decrypt       |\n|    https://github.com/picta-lab/phantom-decrypt     |\n ----------------------------------------------------- \n{\"encryptedKey\":{\"digest\":\"sha256\",\"encrypted\":\"37fJoKsB9vwnKEzPgc2AHtYVsPTTzrXdTGacbgWxLxbiS7Ri3P3iNnf8csaKwJ4wpk\",\"iterations\":10000,\"kdf\":\"scrypt\",\"nonce\":\"49aomus4HiKLyg7F66pSinR4tpuUuJDHX\",\"salt\":\"M1PMFn4p4gdCxZDzf8qX71\"},\"version\":1}\n ----------------------------------------------------- \n|          hashcat -m 26650 hash (scrypt kdf)         |\n ----------------------------------------------------- \nPHANTOM:4096:8:1:ogSL4J4xP/wNbAjiA8Q4hA==:Iofs3VYyyaYFzHVkcMsnpkrjGQ2+Kni2:OacHaTJAM8dD7XJIj5bGMU3cM8QW3u92n+ngYjXsgRSR20FDnkMLQHTgPxJDefOx\n\n```\nIt outputs file HASH.txt in current directory, with the extracted hash\n### Decryptor usage example:\n```\n ----------------------------------------------- \n|       Picta-lab Phantom Vault Decryptor       |\n| https://github.com/picta-lab/phantom-decrypt  |\n ----------------------------------------------- \n\nVault file:     hash.txt\nValid Vaults:   1\nCPU Threads:    16\nWordlist:       wordlist.txt\n2024/11/30 14:11:35 Working...\n{\"encryptedKey\":{\"digest\":\"sha256\",\"encrypted\":\"5pLvA3bCjNGYBbSjjFY3mdPknwFfp3cz9dCBv6izyyrqEhYCBkKwo3zZUzBP44KtY3\",\"iterations\":10000,\"kdf\":\"pbkdf2\",\"nonce\":\"NZT6kw5Cd5VeZu5yJGJcFcP24tnmg4xsR\",\"salt\":\"A43vTZnm9c5CiQ6FLTdV9v\"},\"version\":1}:password\n2024/11/30 14:11:39 Decrypted: 1/1 6181.36 h/s 00h:00m:03s\n\n2024/11/30 14:11:39 Finished\n\n```\n### Decryptor supported options:\n```\n-w {wordlist} (omit -w to read from stdin)\n-h {phantom_wallet_hash}\n-o {output} (omit -o to write to stdout)\n-t {cpu threads}\n-s {print status every nth sec}\n\n-version (version info)\n-help (usage instructions)\n\nphantom_decryptor.exe -h {phantom_wallet_hash} -w {wordlist} -o {output} -t {cpu threads} -s {print status every nth sec}\n\nphantom_decryptor.exe -h phantom.txt -w wordlist.txt -o cracked.txt -t 16 -s 10\n\nphantom_decryptor.exe -h phantom.txt -w wordlist.txt -o output.txt\n```\n\n## 🛠 Installation\n\n### Compile from source:\n- This assumes you have Go and Git installed\n  - `git clone https://github.com/picta-lab/phantom-decrypt.git`\n  - phantom_extractor\n  - `cd phantom-decrypt/phantom_extractor`\n  - `go mod tidy`\n  - `go build -ldflags=\"-s -w\" .`\n  - phantom_decryptor\n  - `cd phantom-decrypt/phantom_decryptor`\n  - `go mod tidy`\n  - `go build -ldflags=\"-s -w\" .`\n\n## 🤝 Contributing\nWe welcome contributions! 💡 Submit a pull request or open an issue to share your ideas.\n\n## 🌟 Get Started Today!\n🌐 Start your Phantom journey now!  \n🔗 If you need help, contact me on telegram @pictalab to explore more.  \n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpicta-lab%2Fphantom-decrypt","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fpicta-lab%2Fphantom-decrypt","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpicta-lab%2Fphantom-decrypt/lists"}