search

darkarp / chromepass

Chromepass - Hacking Chrome Saved Passwords
GNU Affero General Public License v3.0
777 stars 109 forks source link

Gmail blocking, when it try to login on other devices. #9

Closed Subucc closed 5 years ago

Subucc commented 5 years ago

So yes, gmail sending me an alert that someone was trying to log into my account, and it blocking it. I tried to start it on second pc, and it worked, because i already was logging there. I tunred on "Let less secure apps access your account" of course, so I don't know what is the problem. So I tried getting files directly by IP. But it giving me .py output, not .exe. How to change it?...

Subucc commented 5 years ago

image

I don't have 2 step verification, and it's showing when i logging in new devices...

Subucc commented 5 years ago

It's not even work with new gmail account without any data

darkarp commented 5 years ago

Let me check it out

darkarp commented 5 years ago

Meanwhile, check this out

darkarp commented 5 years ago

Also, to get directly from IP just download the code again and try again. This time, the ,py won't appear any more and the server.exe will get replaced :)

Subucc commented 5 years ago

I tried to disable email alerts, but google just change it, and I can't disable alerts enymore. Maybe i should change vpn? Idk, how about you, do you have "Change alert preferences" button? How about sending logs to ftp server. It will be a lot easier...

darkarp commented 5 years ago

Yes that would be easier indeed, although you would need to keep the server online. It's the same hassle as doing it with the client. The problem with email clients is that many don't have the option of disabling this security feature. I will look into other options. If you have a VPS, you can simply host the client there. And if you want to easily access it via email you could also use the client on the VPS and then use the VPS to send the email.

Subucc commented 5 years ago

Yea, you can add save to file on usb too. I know that i can just download Nirsoft Chromepass with command line support, but it is detected by virus, unlike your program.

darkarp commented 5 years ago

True. I'm sorry that it takes long for me to update it, I'm busy. But don't worry, a new version will come out and it will have many new features. If you look at the README page on the "TODO" part, you'll see that in the near future it will actually be unfair to call this ChromePass anymore. It's becoming a Trojan, and eventually a fully functional multi-featured malware creator, which will also have heavy anti-AV :)