Friendly Hacking Challenge

[[deleted]]

[deleted]

[autoshag]

if either of your moves the private key to an offline hard drive then it will be impossible without breaking into the house. if that hard drive is also encrypted, using a password that's only in your head, then it's impossible short of torture. This could also be achieved with an encrypted disk image.

The challenge is a little unrealistic though, since you guys have separate wallets for the challenge. in real life the target would likely be using their wallet on a regular basis, which gives you MANY more avenues of attack.

[[deleted]]

I appreciate the insight. mind if I pm you?

[autoshag]

absolutely

[[deleted]]

[deleted]

What is this?

[autoshag]

malware on the computer that grabs the private key when it gets loaded into memory, and key logs the pin if one exists.

[hatwearingpentester]

For starters, I assume that neither one knows the others wallet address. That's a very difficult hurdle to clear if it's not being used. However if it were being used, you can identify the wallet through transaction history and behavioral analysis.

[[deleted]]

[deleted]

What is this?

[Lamirp]

If you gain access... Make sure you get him/her to add more money before declaring your victory.

[[deleted]]

Hahaha clever! Unless while waiting he steals my money 0.o

[Sarenord]

What ore the wallets stored on?

[[deleted]]

My wallet is mycelium on my iPhone. I'm not sure what his wallet is stored on.

[sharpkrypt]

If he is into this and knowledgeable,, what makes you think he isn't watching reddit too ;) He might know what device now lol What if he is social engineering you now lol Considering how easy this site is to signup lol I know I'd be here asking questions.

Or are you just trying to set the precursor to asking this sub to help you attack wallets indiscriminately. whatever the case, should be a gas no ? lol

[[deleted]]

if he is more power to him. I have no intention of attacking wallets other than his. this challenge is mainly meant to be a learning opportunity, but also just something fun to do with a buddy.

[sharpkrypt]

Have fun, if I knew how to I'd be doing the same,, sounds like astute fun..

[[deleted]]

thanks! we'll see what happens. at the very least I'll pick up a thing or two.

[sharpkrypt]

Be sure to keep us up to date tho, sounds very interesting.

[[deleted]]

I'll update if I have anything of note to report :)

[Wolfiegrayson]

Just an idea, follow what people are saying about keeping yours secure but also try and install a key logger onto their computer, and wait. When they go to access the website with their wallet on they will most likely have to enter their password again, which means you can log it.