HackChrome
HackChrome copied to clipboard
:snowman: Get the User:Password from Chrome(include version < 80 and version > 80)
HackChrome
Get the User:Password from Chrome(include version < 80 and version > 80)
Chrome version Affact
All version
Platform
Windows
Usage
-
Download the exe file here
-
Open cmd or powershell
-
Run
Hackone.exe > res.txt
Demo
Theory
- version < 80
User:Password pairs were stored in the file named "Login Data".
Password was encrypted, But we can use "CryptUnprotectData" Function in "Crypt32.dll" to decrypt them.
Finally, We get the plaintext of the User:Password pairs stored in Chrome
- version > 80
Based on the Algorithm used by "version < 80", It use AES-GCM to encrypt the password via a
The
The
Therefore, we can decrpted all the password.
- Merge the result
If someone update the Chrome recently, we need to find the two ways of User:Password pairs.
What's more, I use some rules to merge the results into an array.
LICENSE
The Project follows MIT LICENSE.