Milk Sad: Weak Wallet Entropy in Libbitcoin Explorer

Repository contains a single C++ program and a README. The main file, NOWYGENERATOR202220223.cpp, is a standalone local key generator targeting two cryptocurrency-related weak-RNG vulnerabilities: CVE-2023-39910 (Milk Sad / libbitcoin-explorer) and CVE-2022-40769 (Profanity). It does not exploit a live service or communicate over the network. Instead, it brute-generates candidate private keys from a user-supplied 32-bit seed range and writes them to text files. Code structure is simple: generate_priv_libbitcoin(seed) uses std::mt19937 seeded with a 32-bit integer and concatenates eight 32-bit outputs into a 32-byte private key; generate_priv_profanity(seed) reproduces a linear congruential generator using state = state * 1103515245 + 12345 and similarly emits 32 bytes; format_time() formats elapsed runtime; main() parses optional CLI arguments [start_seed] [end_seed] [output.txt], iterates through the seed range twice, and writes results to libbitcoin_<output> and profanity_<output> while printing progress statistics. Primary capability is bulk generation of candidate private keys for vulnerable wallets, intended for downstream processing by external tools such as the referenced AllChainScanner. The exploit is therefore operational but local-only: it provides a usable payload (candidate keys) rather than direct compromise logic. No network endpoints, C2, or remote exploitation routines are present. Fingerprintable artifacts are limited to local output filenames and documentation URLs. The README heavily emphasizes cryptocurrency wallet recovery/scanning workflows and explains how generated keys can be converted into addresses and checked for balances using external software.

This repository is a comprehensive cryptanalytic framework targeting the 'Milk Sad' vulnerability (CVE-2023-39910) in Libbitcoin Explorer 3.x, which used a weak MT19937 PRNG for wallet generation. The codebase includes both command-line (main.py) and Jupyter notebook (BitScanPro_Bitcoin_Transaction.ipynb, Bitcoin_Message.ipynb) interfaces for recovering private keys from vulnerable wallets and for constructing and signing Bitcoin transactions with custom OP_RETURN data. Supporting modules (secp256k1.py, sighash.py, sign.py, signing.py) implement Bitcoin cryptography, transaction creation, and signing logic. The pushtx.py script allows broadcasting crafted transactions to the Bitcoin network via public endpoints. The setup.py script downloads additional cryptographic tools. The repository is operational and can be used to exploit the Milk Sad vulnerability, recover private keys, and create transactions embedding arbitrary data. Multiple endpoints for transaction broadcasting and blockchain interaction are hardcoded. The exploit is not part of a larger framework but is a standalone, operational toolset for cryptanalytic attacks on affected Bitcoin wallets.

This repository provides a C++ tool (with both CLI and Qt GUI) to generate BIP-39 24-word mnemonic phrases using a timestamp-based entropy method, specifically to exploit the 'Milk Sad' vulnerability (CVE-2023-39910). The vulnerability affected some cryptocurrency wallets that used only a 32-bit Unix timestamp as entropy for seed phrase generation, making the resulting mnemonics highly predictable and brute-forceable. The tool supports multiple languages (12 BIP-39 wordlists) and can generate mnemonics for a single timestamp, a date range, or the entire 32-bit timestamp space. Output is written to language-specific text files, and progress can be saved and resumed. The codebase is organized into CLI and GUI source directories, with wordlists and test vectors included. The exploit's purpose is to enumerate all possible vulnerable mnemonics, enabling attackers (or auditors) to recover private keys for affected wallets. No network endpoints are present; all attack vectors are local, relying on brute-force computation and analysis of generated mnemonic files.