+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Cryptography, Encryption, and Decryption (https://hackforums.net/forumdisplay.php?fid=126)
+---- Thread: Decrypting Chrome's Login.data ? (/showthread.php?tid=4445895)
Decrypting Chrome's Login.data ? - banees8080 - Sep 13, 2014
Hi guys ,
Is there a way for descrypt google chrome's login.data file of some else's PC ???
Thanks,
* - chick3nman - Sep 13, 2014
(Sep 13, 2014 08:31 PM)banees8080 Wrote: Hi guys ,
Is there a way for descrypt google chrome's login.data file of some else's PC ???
Thanks,
Do you have the files? I could take a look at it. I'm pretty sure it's encrypted against one password for all of it. Triple DES.
* - killerxknight - Sep 13, 2014
In Windows, Chrome uses the Data Protection API (DPAPI) to Triple DES using your Windows user's password. This means that every other program running under your Windows user is able to decrypt the login data. In fact, that's how tools like ChromePass and ChromePasswordDecryptor work. They only decrypt the file and reveal the passwords only if you run them on the same system that encrypted the file (or, perhaps, provide the victim's Windows password).
If the attacker was only able to acquire the Login Data file (for example, you had the file on your memory stick and it was stolen/lost), then your login data are protected as strongly as your Windows password is.
* - banees8080 - Sep 13, 2014
(Sep 13, 2014 08:37 PM)chick3nman Wrote: Do you have the files? I could take a look at it. I'm pretty sure it's encrypted against one password for all of it. Triple DES.
Not yet , But I will get the soon :)
* - chick3nman - Sep 13, 2014
(Sep 13, 2014 08:39 PM)killerxknight Wrote: In Windows, Chrome uses the Data Protection API (DPAPI) to Triple DES using your Windows user's password. This means that every other program running under your Windows user is able to decrypt the login data. In fact, that's how tools like ChromePass and ChromePasswordDecryptor work. They only decrypt the file and reveal the passwords only if you run them on the same system that encrypted the file (or, perhaps, provide the victim's Windows password).
If the attacker was only able to acquire the Login Data file (for example, you had the file on your memory stick and it was stolen/lost), then your login data are protected as strongly as your Windows password is.
I read that one too. I'm not sure if the file itself is encrypted or if each password is encrypted with DES individually. If the whole file is encrypted with DES, then i wont be able to crack it with any tools i have. If its just the passwords in the file, i should be able to feed them into something as text and try to crack them. Even oclHashcat supports some forms of DES.
* - banees8080 - Oct 12, 2014
Sorry guys , was away for some days.
I have the Login.data file , Who can help me to crack it ?
Cheers !
* - banees8080 - Oct 15, 2014
Bump !! Anyone who can help me ??
xxxxxx
* - Jolyan - Oct 16, 2014
Well, if you post a link to the login.data people could have a go at it.