v0.2.1

Changelog: fixed #2

Metamask Vault Decryptor

POC tool to decrypt metamask vault wallets

This tool is proudly the first publicly released Metamask Vault decryptor / cracker to support the new Metamask wallet vaults which have a dynamic iteration.

./metamask_decryptor_amd64.bin -h metamask_json.txt -w wordlist.txt
 ------------------------------------ 
| Cyclone's Metamask Vault Decryptor |
 ------------------------------------ 

Vault file:     metamask_json.txt
Valid Vaults:   1
CPU Threads:    16
Wordlist:       wordlist.txt
Working...

Decrypted: 0/1  5430.89 h/s     00h:01m:00s

Info:

• Supports previous Metamask vaults as well as new vaults with "KeyMetadata" which have dynamic iterations
• If you need help extracting Metamask vaults, use Metamask Extractor https://github.com/cyclone-github/metamask_extractor
• Metamask Vault Decryptor will be superseded by hashcat once a custom hashcat kernel is released, however, Metamask Vault Decryptor also displays the seed phrase alongside the vault password, which hashcat does not currently support

Example vaults supported:

• Old vault format: {"data": "","iv": "","salt": ""}
• New vault format: {"data": "","iv": "","keyMetadata": {"algorithm": "PBKDF2","params": {"iterations": }},"salt": ""}

Usage example:

• ./metamask_decryptor.bin -h {wallet_json} -w {wordlist}

Output example:

If the tool successfully decrypts the vault, tool will print the vault json, seed phrase and vault password

Decrypted Vault: '{}'
Seed Phrase:    ''
Vault Password: ''

SHA256

8e9d96369d0fb0d8a667b8fe2b0c80bb6ea1e5d09796f483a4f39a6f1398835e  metamask_decryptor_amd64.bin
7c7d97e84521c27fe8210741801878ce799f4cf35d887e137d742fbe1f9d2ea0  metamask_decryptor_amd64-darwin
f95e91b1e5c3050defacf7c9256433ccef1408c3ff8dec8a9bddbe40a45bc6c9  metamask_decryptor_amd64.exe