5 ms·
Someone else might find this tool I wrote useful, it finds BTC wallets by scanning raw block devices: https://github.com/jakewins/findbtc https://github.com/ja
by jakewins 9y ago
Someone else might find this tool I wrote useful, it finds BTC wallets by scanning raw block devices:
https://github.com/jakewins/findbtc https://github.com/jakewins/findbtc
I deleted 26BTC a while back when reinstalling a laptop, because they were effectively worthless. A few years later, they weren't anymore, so I wrote this to get them back. As long as the file system isn't encrypted, it scans the raw bytes on the disk to find remnants of wallets. It also unzips compressed files it finds and does the same scanning in there.
- joshstrange 9y agoHow do you build this? I see it's go and I have that installed on my laptop but I'm not familiar with the commands to run to build it and the last 15min or so of googling around have been fruitless.
- jakewins 9y agoIf you have Go installed as per https://golang.org/doc/install https://golang.org/doc/install you can build/install this project like this: > go install github.com/jakewins/findbtc I'll update the readme! If that's giving you trouble, I can cross compile it here and upload a binary to github for you if you tell me your OS and processor - although since this is potentially sensitive software, I'd advice building it from source
- deleted 9y ago[deleted]
- alinspired 9y agoI've tried your test wallet and got an offset for file location - any hints on how to get the wallet's content, with dd i presume?
- jakewins 9y agoYeah, the tool doesn't help much past this, it'll just tell you where the raw bytes are. Basically, what is at that offset is (remnants of) a Berkeley DB file; you'll need manually do the forensic work to get the key out of it past that. Alternatively, there are services that will recover locked/corrupted wallet files I think, so you could extract a big blob around that byte offset and find someone that will do the forensic work for you.