https://github.com/marvinjanssen/blockstack-thief

A simple command-line utility to interact with Gaia buckets using app private keys.
https://github.com/marvinjanssen/blockstack-thief

Last synced: 1 day ago
JSON representation

A simple command-line utility to interact with Gaia buckets using app private keys.

• Host: GitHub
• URL: https://github.com/marvinjanssen/blockstack-thief
• Owner: MarvinJanssen
• License: mit
• Created: 2020-02-21T06:45:56.000Z (over 4 years ago)
• Default Branch: master
• Last Pushed: 2022-12-10T19:00:11.000Z (almost 2 years ago)
• Last Synced: 2024-05-01T18:04:03.746Z (7 months ago)
• Language: JavaScript
• Size: 139 KB
• Stars: 1
• Watchers: 2
• Forks: 1
• Open Issues: 5
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# Blockstack Thief

A simple command-line utility to interact with Gaia buckets using app private keys. Created to aid in a security assessment as described in [this article](https://medium.com/@marvinjanssen/stealing-app-private-keys-on-blockstack-2cec9d606390).

## Set up

1. Clone this repository.

2. `npm install`

3. `node index.js`

## Usage

Extract an app private key and start a session:

```

> session "https://appdomain.co" "app private key"

OK

```

Then list all files in the Gaia bucket using:

```

> listfiles

file1.json

file2.json

```

Decrypt a file and print to screen:

```

> getfile --decrypt --print file1.json

{ title: "file", content: "file contents" }

```

Run `help` to see a list of all commands.