https://github.com/cyclone-github/hashcat_26620_kernel
Custom hashcat kernel for new Metamask Vaults
https://github.com/cyclone-github/hashcat_26620_kernel
Last synced: 10 months ago
JSON representation
Custom hashcat kernel for new Metamask Vaults
- Host: GitHub
- URL: https://github.com/cyclone-github/hashcat_26620_kernel
- Owner: cyclone-github
- License: mit
- Created: 2024-03-02T17:49:29.000Z (almost 2 years ago)
- Default Branch: main
- Last Pushed: 2025-02-12T15:30:43.000Z (12 months ago)
- Last Synced: 2025-03-22T13:22:30.221Z (10 months ago)
- Language: C
- Size: 252 KB
- Stars: 10
- Watchers: 3
- Forks: 2
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
[](https://github.com/cyclone-github/hashcat_26620_kernel/)
[](https://github.com/cyclone-github/hashcat_26620_kernel/issues)
[](LICENSE)
# `FYI`:
There are devs who have copied my 26620 hashcat kernel / module and are selling it online. Please note that I open source my code on GitHub and do not charge $$ for it as I believe a stronger community is more important. If you are purchasing a hashcat kernel that is -m `26620`, keep in mind that it's 100% copied from this 26620 GitHub repo -- which is open source.
If you're a developer who is wanting to use my 26620 *.cl kernel and *.c module for your project, I ask you to consider the following:
1. Contact me and I'll be glad to support your development
2. Give me credits for the original 26620 kernel
3. Change the hashcat mode (26620) to something unique (like 2663x)
4. Update the following in `module_*.c`:
* HASH_NAME
* KERN_TYPE
* ST_HASH
* SIGNATURE_METAMASK_WALLET
# hashcat Metamask -m 26620 kernel
Custom hashcat kernel for new Metamask Vaults which use dynamic iterations
### Compile 26620 kernel:
- cd to your `hashcat/` directory
- save `module_26620.c` to `hashcat/src/modules/`
- save `m26620-pure.cl` to `hashcat/OpenCL/`
- run these commands to compile (_you must have gcc installed and be in the root hashcat directory in order to run the compile commands below_)
- make clean
- make
### Notes:
- To write the 26620 kernel, a 26600 kernel was modified to read a dynamic iteration rather than using a static iteration
- Kernel has been tested with hashes using various dynamic iterations from 10000 to 600000
- Credits go to the hashcat devs who wrote the original 26600 kernel
### Test hash:
Vault extraction:
```
-----------------------------------------------------
| Cyclone's Metamask Vault Hash Extractor |
| Use Metamask Vault Decryptor to decrypt JSON below |
| https://github.com/cyclone-github/metamask_decryptor |
-----------------------------------------------------
{"data":"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","iv":"ypLEYWtsRzEw9w+Qeib/5g==","keyMetadata":{"algorithm":"PBKDF2","params":{"iterations":600000}},"salt":"PCfeUVXQ5M31RQs2rLT6kF9pJRTbT0vMyXMURoJO6EE="}
--------------------------------------------------------
| hashcat -m 26620 hash (NEW format) |
| https://github.com/cyclone-github/hashcat_26620_kernel |
--------------------------------------------------------
$metamask$600000$PCfeUVXQ5M31RQs2rLT6kF9pJRTbT0vMyXMURoJO6EE=$ypLEYWtsRzEw9w+Qeib/5g==$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
```
Benchmark:
```
./hashcat -b -m 26620
* Device #1: NVIDIA GeForce RTX 4090, 23820/24215 MB, 128MCU
...
Speed.#1.........: 14125 H/s (63.04ms) @ Accel:16 Loops:512 Thr:512 Vec:1
```
Hashcat:
```
./hashcat -m 26620 -a 0 hash.txt wordlist.txt
...
$metamask$600000$PCfeUVXQ5M31RQs2rLT6kF9pJRTbT0vMyXMURoJO6EE=$ypLEYWtsRzEw9w+Qeib/5g==$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:hashcat1
Session..........: hashcat
Status...........: Cracked
Hash.Mode........: 26620 (MetaMask Wallet (needs all data, checks AES-GCM tag))
Hash.Target......: $metamask$600000$PCfeUVXQ5M31RQs2rLT6kF9pJRTbT0vMyX...f0Zg==
Time.Started.....: Mon Nov 18 11:51:26 2024 (2 secs)
Time.Estimated...: Mon Nov 18 11:51:28 2024 (0 secs)
Kernel.Feature...: Pure Kernel
Guess.Base.......: File (tmp_wordlist.txt)
Guess.Queue......: 1/1 (100.00%)
Speed.#1.........: 1 H/s (0.16ms) @ Accel:320 Loops:64 Thr:32 Vec:1
Recovered........: 1/1 (100.00%) Digests (total), 1/1 (100.00%) Digests (new)
Progress.........: 1/1 (100.00%)
Rejected.........: 0/1 (0.00%)
Restore.Point....: 0/1 (0.00%)
Restore.Sub.#1...: Salt:0 Amplifier:0-1 Iteration:599936-599999
Candidate.Engine.: Device Generator
Candidates.#1....: hashcat1 -> hashcat1
Hardware.Mon.#1..: Temp: 47c Fan: 0% Util:100% Core:2790MHz Mem:10501MHz Bus:1
```
```
sha256 checksums
e3f99d5f38328b8a851941f481e71915c38b92900d01a585f2953ed1fbdc12e5 hashcat/OpenCL/m26620-pure.cl
398c882cf5460163445c959b35219fb1c20ac2a81baf080a0358e7ca138f0155 hashcat/src/modules/module_26620.c
626caa48a6acde33985adb1c18ae669672dd764b1288edc0b012a072cc3ebb95 hashcat/modules/module_26620.dll
6d9e2efa80f23e4dd6868340e32d4d76b859d0d09392632f51c8b3029f2629e0 hashcat/modules/module_26620.so
```