secretsdump: Dump passwords saved in browsers, perhaps cookies?

[AdrianVollmer]

Would you see this feature as in scope of secretsdump? It would have been very beneficial for me recently if I could have dumped passwords stored by Chrome. They are stored in sqlite databases encrypted with DPAPI keys, so with local admin rights we should be able to get to them. Similarly with cookies, which could be of interest as well.

I might take a stab at it with a PR, unless you think this is out of scope. Don't want to waste anyone's time.

[ThePirateWhoSmellsOfSunflowers]

Hey!

You should give a try to https://github.com/login-securite/DonPAPI

:sunflower:

[AdrianVollmer]

Closing since DonPAPI fills this gap

[Anon-Exploiter]

Just adding to this, netexec also supports this.

https://www.netexec.wiki/smb-protocol/obtaining-credentials/dump-dpapi

netexec smb srvr -d 'domain' -u 'user' -p 'password' --dpapi