LaZagne icon indicating copy to clipboard operation
LaZagne copied to clipboard

MS Edge Question

Open stilllearning65 opened this issue 8 months ago • 8 comments

How do you extract the passwords from Microsoft Edge. I've run as Admin with all -vv an browsers -vv and nothing. see attached files. What is the proper command, Please.

L-All.txt L-Browser.txt

stilllearning65 avatar Apr 23 '25 21:04 stilllearning65

MS Edge uses DPAPI as a password storage.

You should to know user's password to retrieve the password from DPAPI. LaZagne is able accept password as a command line parameter.

MyLoginOnGitHub avatar May 02 '25 19:05 MyLoginOnGitHub

tried adding the password, no go i just don't understand Thanks for trying to help. you can close

On Fri, May 2, 2025 at 2:20 PM MyLoginOnGitHub @.***> wrote:

MyLoginOnGitHub left a comment (AlessandroZ/LaZagne#668) https://github.com/AlessandroZ/LaZagne/issues/668#issuecomment-2847931214

MS Edge uses https://learn.microsoft.com/en-us/deployedge/microsoft-edge-security-password-manager-security#about-the-encryption-method DPAPI as a password storage.

You should to know user's password to retrieve the password from DPAPI. LaZagne is able accept password as a command line parameter.

— Reply to this email directly, view it on GitHub https://github.com/AlessandroZ/LaZagne/issues/668#issuecomment-2847931214, or unsubscribe https://github.com/notifications/unsubscribe-auth/BODKOR4HM6R3ERGROAW3DIL24PAQVAVCNFSM6AAAAAB3XMIIDCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDQNBXHEZTCMRRGQ . You are receiving this because you authored the thread.Message ID: @.***>

stilllearning65 avatar May 04 '25 00:05 stilllearning65

MS edge is chromium based browser. As it shown in your L-All.txt on line 216 it is unable to use module ChromiumBased because you have not installed module pycryptodome. Run pip install -r requirements.txt and enjoy LaZagne :)

Excuse me, please. I was wrong in the previous comment. As far as I understand, there is no need to know password to retrieve data from DPAPI for current user.

Also. I have set up the following environment:

  • Windows 10
  • Microsoft Edge version 136.0.3240.50 (latest for now)

And LaZagne successfully extracted saved password with command python LaZagne.py (i.e. with no parameters).

MyLoginOnGitHub avatar May 05 '25 18:05 MyLoginOnGitHub

Will try this when i get a chance, thank you for the help. just one question: How do you do this when using the .EXE?

stilllearning65 avatar May 06 '25 16:05 stilllearning65

un installed an started from scratch (see attached) no go must be a problem with Windows 11 Sorry for all the trouble

lazagne.txt

stilllearning65 avatar May 06 '25 17:05 stilllearning65

Exe is compiled with all dependencies

MyLoginOnGitHub avatar May 06 '25 19:05 MyLoginOnGitHub

.exe doesn't show passwords either

stilllearning65 avatar May 07 '25 23:05 stilllearning65

Wrote about it here:

https://github.com/xaitax/Chrome-App-Bound-Encryption-Decryption/blob/main/The_Curious_Case_of_the_Cantankerous_COM_Decrypting_Microsoft_Edge_ABE.md

My tool does all the decryption etc.

xaitax avatar May 14 '25 06:05 xaitax