FallenAstaroth / stink

🚀 Stealer on built-in libraries only, which doesn't create any temp files on data collecting, with 4 sending methods and lots of functionality.
Apache License 2.0
224 stars 55 forks source link

Cookies #46

Closed EDown2k closed 1 year ago

EDown2k commented 1 year ago

Amazing work on this gem! Just wondering about cookies for Chrome. When importing json cookies via Chrome extensions it doesn't seem to work. Firefox cookies work great. Anyone facing the same issue or know of a solution?

FallenAstaroth commented 1 year ago

Amazing work on this gem! Just wondering about cookies for Chrome. When importing json cookies via Chrome extensions it doesn't seem to work. Firefox cookies work great. Anyone facing the same issue or know of a solution?

Thank you) Are you using the same extensions to import? If not, maybe it's because there are slightly different import formats.

EDown2k commented 1 year ago

Amazing work on this gem! Just wondering about cookies for Chrome. When importing json cookies via Chrome extensions it doesn't seem to work. Firefox cookies work great. Anyone facing the same issue or know of a solution?

Thank you) Are you using the same extensions to import? If not, maybe it's because there are slightly different import formats.

No, on Firefox an extension called "Cookie Quick Manager" works well. On Chrome, I've tried about 10 different extension and none of them seem to work. I've formatted the cookies to correct JSON as well as simply copy/pasting the JSON provided and still no luck. Could you recommend any extensions or alternatives to import Chrome cookies?

FallenAstaroth commented 1 year ago

Amazing work on this gem! Just wondering about cookies for Chrome. When importing json cookies via Chrome extensions it doesn't seem to work. Firefox cookies work great. Anyone facing the same issue or know of a solution?

Thank you) Are you using the same extensions to import? If not, maybe it's because there are slightly different import formats.

No, on Firefox an extension called "Cookie Quick Manager" works well. On Chrome, I've tried about 10 different extension and none of them seem to work. I've formatted the cookies to correct JSON as well as simply copy/pasting the JSON provided and still no luck. Could you recommend any extensions or alternatives to import Chrome cookies?

I can't tell you now, because I wrote this functionality more than a year ago. As soon as I have time, I will test it and report the results.

EDown2k commented 1 year ago

Thank you. I think it may be related to how Chrome handles cookies now. Appreciate your work.

ChazGTP commented 1 year ago

I have the same issue. Everything works great except for the cookies. Has there been any resolution to this? The json file seems to be improperly formatted or something.

QuangTuyeens commented 1 year ago

u need convert cookie type, still using netscape cookie but shorten like this name=value;name2=value2

EDown2k commented 1 year ago

u need convert cookie type, still using netscape cookie but shorten like this name=value;name2=value2

Please elaborate. Is there a tool that can do this or can you show me an example? Thx!

EDown2k commented 1 year ago

Did anyone have any luck figuring out how to get cookies to work here? Thanks!

FallenAstaroth commented 1 year ago

Did anyone have any luck figuring out how to get cookies to work here? Thanks!

1) Clean your browser history with cookies. 2) Install Cookiebro extension 3) Prepare json file with cookies.

EDown2k commented 1 year ago

I've tried this method plus many others. This works with every other stealer I've used except for Stink. I've tried with 50+ different json cookie files and multiple cookie editors including Cookiebro.

In Step 3 (Prepare json file with cookies). The file is already in json format. I open them and make sure there are not commented lines with # as well. Has anyone been able to get cookie import to work with Stink?

FallenAstaroth commented 1 year ago

I've tried this method plus many others. This works with every other stealer I've used except for Stink. I've tried with 50+ different json cookie files and multiple cookie editors including Cookiebro.

In Step 3 (Prepare json file with cookies). The file is already in json format. I open them and make sure there are not commented lines with # as well. Has anyone been able to get cookie import to work with Stink?

Can you give me an example of an open-source stealer where cookies work fine through these extensions? I will compare them and try to determine the cause.

EDown2k commented 1 year ago

Yes, sure. Please see https://github.com/can-kat/cstealer The cookies are in a different format, but work well. Thx

FallenAstaroth commented 1 year ago

Yes, sure. Please see https://github.com/can-kat/cstealer The cookies are in a different format, but work well. Thx

The cookie format has been changed to Netscape. Update to the latest version.

FallenAstaroth commented 1 year ago

Tested on this extension.

  1. Pull all lines from the desired site from the cookies file.
  2. Go to the site for which you want to import cookies.
  3. Open the import tab of the extension.
  4. Insert a cookie and click the import button.
  5. Reload the page.
EDown2k commented 1 year ago

Thanks so much! It seems this update doesn't bypass WD but still the cookies functionality works.