darkarp / chromepass

Chromepass - Hacking Chrome Saved Passwords
GNU Affero General Public License v3.0
777 stars 109 forks source link

Doesn't work with whatsapp web #30

Closed azsde closed 3 years ago

azsde commented 3 years ago

Retrieved cookies cannot be used to log in into my whatsapp web session using autocookie.

It works ok with facebook.

darkarp commented 3 years ago

It won't work with everything due to many reasons. Cookies may not be enough to authenticate everywhere. I'll look into whatsapp web, I'm not entirely sure how their authentication is done yet. There are several ways to prevent autocookie from being able to log you in. I'll add more features soon that will make it better equipped against these strategies.

The first thing that will be improved will be a better replication of the user environment, including using the same user agent and other data to better impersonate the specific user.

darkarp commented 3 years ago

For WhatsApp web and other similar services, after further inspection, if possible, would require a complete simulation including the local storage data. This kind of feature might come in the future but since it's quite a bit of a challenge due to very bad support for this, I will not be working on it at the moment.