search

defaultnamehere / cookie_crimes

Read local Chrome cookies without root or decrypting
https://mango.pdf.zone/stealing-chrome-cookies-without-a-password
MIT License
610 stars 79 forks source link

Not working on Windows 10 - Chrome 81.0.4044.138 #17

Open physics-sec opened 4 years ago

physics-sec commented 4 years ago

While the tool does outputs some cookies, this aren't really the cookies of the user. Chrome dev tools opens the page in some kind of container, without the user's cookies. The cookies it outputs are just the cookies that google sets automatically, without the user being logged in.

If you delete de --headeless parameter in the source code, run the tool and when chrome opens you go to http://localhsot:9222/json/new?https://some_page_you_are_logged_in.com you will see you are not going to be logged in this URL, that's why the tool can't retrieve the real cookies.

At least that is what I understood. Only tested in Windows 10, on the latest Chrome.

physics-sec commented 4 years ago

BTW, i used the pull requests update that is not yet on the main branch to run it.

hakanonymos commented 4 years ago

Please you can see my repo works all version browser

https://github.com/hakanonymos/steal-chrome-password-all-version

physics-sec commented 4 years ago

Well, It did work! very interesting work @hakanonymos , I will take a closer look!