Buddy of mine said he has an old hard-drive with private keys to BTC on it from over a decade ago.

He said I could have 20% of whatever amount of BTC is in the wallet.

Have any anons here tried to access old and trying to recover crypto/keys?
I have a technical background but have never tried this sort of thing before. Seems like a fun challenge all things considered.

Any idea where I can start learning how to pull this off in such a way I don't accidentally delete important stuff?

You have to slowly dip the drive in a bowl of extra virgin olive oil until completely submerged, wave a tub of salt around the bowl clockwise six times followed by anticlockwise three times, then get the drive out the bowl.
Wallah...the bitcoin is now ready for extraction from the drive.

Have you tried Google or YouTube?

>>60580198
I'm currently looking through there as well.

Just thought I would find shizos here who have tried who could give me pointers.

>>60580177 (OP)
I would find a regex or Yara rule or similar for Bitcoin addresses/bip32 private keys and scan all files on the drive looking for a match

>in such a way I don't accidentally delete important stuff
You take an image of the drive and mount it as a virtual disk and leave the original physical drive untouched.

>>60580215
okay, using regex makes sense to me.

And taking an image of the drive is also a solid idea.

So, dumb question, you may/may not know the answer to,
If the drive is password protected, would you know ways to bypass?

>>60580228
>If the drive is password protected, would you know ways to bypass?
This nigga tryna break into somebody's drive kek

>>60580237
My buddy said he forgot his password, its been over a decade...

>>60580228
>would you know ways to bypass?
Yes
But it depends on what you mean.
If the PC is password protected, that won't effect the hard drive if you mount it in another device.
If the drive is encrypted with something like Bitlocker, you can remove this if you have the original Windows license key. Which is often on a sticker on most laptops and off the shelf PCs.
If it's something else, there are ways to get around it.
Passwords don't stop forensics

>>60580245
Yeah yeah, so who's drive did you steal OP.

>>60580245
When you lie, you only hurt yourself anon.

>>60580228
>If the drive is password protected, would you know ways to bypass?
Give it back Jamal.

>>60580257
Ok, that makes sense, I definitely don't think my bud had his hard-drive encrypted.

And I think extracting the drive from his old PC and mounting it shouldn't be straight-forward.

That pretty much sums up my questions, Appreciate the Answers anon!

>>60580177 (OP)
did he keep the keys/pass phrase on the hard drive?

>>60580245
If it's just a local password like on windows XP/7/10 you can bypass it with sticky keys trick.
You boot the PC with a USB stick and replace sethc.exe in the system32 folder with cmd.exe
Then boot as normal and at the login screen, press the shift key a bunch of times. This launches Sticky Keys, except now instead it drops you to command prompt with Admin privileges.
Then you just reset the password.

https://www.ndchost.com/wiki/windows/stickykeyspasswordreset

>>60580276
He said his private-keys yes.

>>60580278
Thats a good source, thanks!

OP is a filthy jeet until proven otherwise (photo of hand with timestamp).

>>60580177 (OP)
First, you can try a skilled repair shop. Do not mention anything about bitcoin or keys, just ask them to simply clone the files to a new drive. My hard drive failed years ago and I tried this. There are services you can send it to that will do a hardcore extraction (they wear hazmat suits in a vacuum chambered room) though it's expensive and could fail.

What I would do is send it in, extract the passwords, tell your friend it failed, and pocket the money. But that's just me.

>>60580271
>And I think extracting the drive from his old PC and mounting it shouldn't be straight-forward.
you came on here asking for advice before even consider plugging the fucking thing in?

>>60580257
Passwords do not equal encryption though, if it was indeed encrypted then no password, no access.

If it's a self encrypted drive them hopefully theres a firmware exploit or chip modification a repair shop can go through

>>60580177 (OP)
give it back jamal

>>60580503
this even the internet is low trust because I have to assume everyone is NW (non-white)

>>60580301
he is trying to get you to brick the whole system. Lol Don't do it.

>>60580245
run a cracker....

just run a word list through it

10 years ago=no spam protection
10 years ago also means no numbers or capital letters.....

it will take like 20 minutes to run an alphabet craker through it

>>60580177 (OP)
>integrity dao price goes sideways for 48 hours
>chat starts posting bs
>one guy sends a picture of a rock
>someone else says the rock is us
>i get it

>>60580196
Do not do this btw it will ruin the thumb drive