CyberChef
CyberChef copied to clipboard
Add Extractor to find Bitcoin Addresses in Text
Bitcoin Addresses
Added an Operation to Extractors to find Bitcoin Addresses in Text. Since these are very comon in Ransomware it is useful to have the operation. You can write the Regex expression but I feel that this is a valuable function to add. The Regex is fairly smart and should discard many invalid Bitcoin Addresses.
Based on the information found here:
http://mokagio.github.io/tech-journal/2014/11/21/regex-bitcoin.html
This issue looks very similar to what you want: https://github.com/gchq/CyberChef/issues/1225
This issue looks very similar to what you want: #1225
Thanks for your note. I have actually made the change, rather than being a feature request. So the code has been written along with tests. So unsure if I have missed something in your reply?
With the comment perhaps I haven't been clear in the first description.
I have extended the extractor which seems to be the right place for the improvement. There are extractors for data such as IP Address, MAC address, and dates extractors. I have added a menu for extract Bitcoin addresses. So If you enter an email text for example and it contains a bitcoin address as often included in a Ransomware or Blackmail Scam, the extractor will extract the address and list them. This update includes the code, it has been added onto the menu and has a small number of tests to prove that it works as specified.