gentilkiwi / mimikatz

A little tool to play with Windows security
http://blog.gentilkiwi.com/mimikatz
18.98k stars 3.62k forks source link

Pass-The-Cookie #417

Open B3YD4 opened 1 year ago

B3YD4 commented 1 year ago

https://twitter.com/gentilkiwi/status/1226112497259876353

According to the Sharing Here, We are now decrypting cookies with AES keys, but when I tried to run these codes, I noticed that it did not find the "Encrypt Key" and at the same time, it does not see the Locale State File, I guess, so it does not give these outputs to the terminal and I cannot see AES encryption, has anyone experienced this problem before? ? If so can you help?

problem

edit:

dpapi::chrome /state:"filepath/local state" /in:"filepath:/login data" /unprotect it doesn't work and "ERROR kuhl_m_dpapi_chrome_alg_key_from_file ; encrypted_key not fond in state file." It gives an error like I think it doesn't see the local state file