Plutus

Bitcoin Brute Forcer

Installation and Usage

Python 3+ Required

A Constant Internet Connection Is Required

Installation:

$ git clone https://github.com/Isaacdelly/Plutus

$ cd Plutus

$ pip install -r requirements.txt 

Run File:

$ cd Plutus

$ python plutus.py

Proof of Concept

This program is meant to analyze possible ways Bitcoin could be stolen. Because it is impossible to convert a wallet address back into its private key, this program goes the opposite way and generates a completely random private key, then converts it into its respective Bitcoin address. It then queries the calculated address for a balance and prints the result to the user.

This program does this in a brute-force style, repeatedly generating and converting private keys, and querying balances. The ultimate goal is to randomly find a wallet with a balance out of the 2¹⁶⁰ possible wallets in existence. However unlikely, it is possible to eventually find a viable wallet. In the event that a wallet with a balance is found, the wallet's private key, public key, wallet address, and balance is stored in a text file for later use.

Although this project can be used maliciously, it is simply an exploration into the Bitcoin protocol and advanced encryption and hashing techniques using Python.

How it Works

Private keys are generated randomly to create a 32 byte hexidecimal string using the cryptographically secure os.urandom() function.

The private keys are converted into their respective public keys. Then the public keys are converted into their Bitcoin wallet addresses using the binascii, ecdsa, and hashlib Python modules.

The wallet addresses are queried using Block Explorer API to collect balance details.

If the wallet contains a balance, then the address, private key, public key, and balance are saved to a text file plutus.txt on the user's hard drive.

Expected Outputs

If the wallet is empty, then the format Wallet Address = 0 will be printed. An example is:

1A5P8ix6XaoCqXmtXxBwwhp5ZkYsqra32C = 0

However, if a balance is found, then the output will include all necessary information about the wallet. A copy of the output will also be saved in a text file titled plutus.txt with all balances in Satoshi. An example is:

address: 1FMdedPnanqb3Z2wHGxbZzm7r8k8oK97Mc
private key: 89cd4d8984692f31e572dc61dc1bc78517ef440308b71faa1ed3815e7afa76a2
public key: 04CF7C2B23181BA6EAA841F3A0CB07F387C1DB54FE5F3BE4CC590C4802E4BEE82C58AFC030734C90DE6119F1C1997136EDADA066684E5A7A94A73B2F095B0C14BA
balance: 100000

Warnings

If you are receiving:

HTTP Error Code: (number)
Retrying in 5 seconds

Or

Unable to connect to API after several attempts
Retrying in 30 seconds

This program queries Block Explorer API for wallet balances making a HTTP request necessary for complete operation. If connection to the API is found to be unresponsive (failing to return a 200 HTTP status) the program will pause for 5 seconds and attempt to continue.

If you are receiving a lot of errors, visit Blockexplorer.com to see if their API might be down.

This program also responds to 429 HTTP responses because of the high frequency of server requests. When a 429 is encountered, the program will continue without giving an error. However, if several 429's are received consecutively, the user will get the result Unable to connect to API after several attempts and will be forced to wait 30 seconds until the program continues again.

Efficiency

This program is able to handle, generate, and query a private key in 0.5 seconds. However, because this program uses the internet for balance requests, a slower internet connection may impact time efficiency.