search

login-securite / DonPAPI

Dumping DPAPI credz remotely
GNU General Public License v3.0
941 stars 112 forks source link

Add option to retrieve cookies as well as saved logins #16

Closed br-sn closed 2 years ago

br-sn commented 2 years ago

DonPAPI does a fantastic job of retrieving saved login credentials, however the option to retrieve cookies would be beneficial to be able to steal existing sessions and bypass 2FA protection. Currently it seems an attempt was made at adding this feature but it may have been abandoned (https://github.com/login-securite/DonPAPI/blob/main/myseatbelt.py#L460). I might try and have a go at this in a few weeks but not sure if I'll be able to pull it off.

login-securite commented 2 years ago

donne in PR cookies_enabled for chrome cookies. will have to research a bit to do this for IE/EDGE/Firefox too