v.0.2.0

Metamask Vault Hash Extractor

Tool to extract metamask vaults to JSON and hashcat compatible formats

Info:

• Metamask JSON vaults can be decrypted with https://github.com/cyclone-github/metamask_decryptor
• Previous Metamask vaults can be cracked using hashcat -m 26600
• New Metamask vaults can be cracked using the upcoming hashcat -m 26620
  • hashcat/hashcat#3952

Metamask Vault location for Chrome extensions:

• Linux: /home/$USER/.config/google-chrome/Default/Local\ Extension\ Settings/nkbihfbeogaeaoehlefnkodbefgpgknn/
• Mac: Library>Application Support>Google>Chrome>Default>Local Extension Settings>nkbihfbeogaeaoehlefnkodbefgpgknn
• Windows C:\Users\$USER\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn

Usage:

• Linux: ./metamask_extractor.bin {metamask_vault_dir}
• Windows: metamask_extractor.exe {metamask_vault_dir}

e891c433a5b4305fa2eece571bb8b98bfba605007ee4cab28f20232a33783cd0  metamask_extractor_amd64.bin
2851dd212fd9914db4a613b07d0e1760787ce437654a38cf3c07394867986c95  metamask_extractor_amd64-darwin
020a92035ce6e7669060e5608de9d6c57711625f29633910f05b6153d7dc9ae5  metamask_extractor_amd64.exe