+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: How to steal Browser Cookies using a RAT (/showthread.php?tid=5828630)
Pages: Pages
1
2
How to steal Browser Cookies using a RAT - Thresh - Apr 23, 2018
1. Open the File Manager
[img]http://up.picr.de/32487325xl.png[/img]
2. Navigate to : "C:\Users\<your_username>\AppData\Local\Google\Chrome\User Data\Default\"
[img]http://up.picr.de/32487346dm.jpg[/img]
Download the "Cookies" file (which is an SQLite database file) and replace it with yours (make a safety copy of yours!).
Preferably you take the whole "User Data" folder and replace it.
After that you can use a Reverse Proxy and Chrome will think you are the Bot.
You can get a Reverse Proxy from QuasarRAT which is free to use and open source.
I hope i could helped someone with that.
RE: How to steal Browser Cookies using a RAT - Fulya Donmez - Apr 23, 2018
What kind of rat is this?
RE: How to steal Browser Cookies using a RAT - T0pi4ry - Apr 23, 2018
Cracked version of NanoCore ;) :)
RE: How to steal Browser Cookies using a RAT - Chaval - Apr 23, 2018
how can we do this if we are using HRDP feature on someone?
RE: How to steal Browser Cookies using a RAT - roni2228 - Apr 23, 2018
(Apr 23, 2018 06:14 PM)Chaval Wrote: how can we do this if we are using HRDP feature on someone?
just copy and replace the data base folder to the new one created in the new user of your HRDP...
RE: How to steal Browser Cookies using a RAT - Thresh - Apr 24, 2018
(Apr 23, 2018 02:21 PM)Fulya Donmez Wrote: What kind of rat is this?
Im using Quasar RAT
(Apr 23, 2018 04:02 PM)T0pi4ry Wrote: Cracked version of NanoCore ;) :)
Its QuasarRAT, no cracked sh1t
RE: How to steal Browser Cookies using a RAT - T0pi4ry - Apr 24, 2018
(Apr 24, 2018 04:56 AM)Thresh Wrote: Its QuasarRAT, no cracked sh1t
Ohhhh
I'm sorry, The design seems like NanoCore .
BTW, Thanks for the post 🤝
Much appreciated ✌ ✌
RE: How to steal Browser Cookies using a RAT - 07717073 - Apr 25, 2018
Thank you!! This should help
RE: How to steal Browser Cookies using a RAT - shahwahababdul - Apr 25, 2018
Thanks buddy for this :)
sent you a pm need some help :D
RE: How to steal Browser Cookies using a RAT - Nick (Name) - Apr 26, 2018
For Chrome if you're using Orcus, you can use a feature with a bit of exploiting and pretty much hVNC the browser, no need for stealing the cookies if you can just use the browser as if you were sitting at their desk ;)
Check the only thread I have for more info
RE: How to steal Browser Cookies using a RAT - DelziumTheProudWhale_temp - Apr 26, 2018
toobad this just works on the target machine as the cookies are encrypted, you can't just steal them and replace your computer with them
RE: How to steal Browser Cookies using a RAT - Angel914xD - Nov 12, 2018
Thank you very much for the contribution champion
RE: How to steal Browser Cookies using a RAT - Nick (Name) - Nov 12, 2018
(Apr 26, 2018 04:11 AM)DelziumTheProudWhale_temp Wrote: toobad this just works on the target machine as the cookies are encrypted, you can't just steal them and replace your computer with them
I know this user is banned but I’m replying to what he has stated, since Google Chrome does indeed encrypt the cookies here’s a cool blog post with a work around https://mango.pdf.zone/stealing-chrome-cookies-without-a-password
RE: How to steal Browser Cookies using a RAT - Angel914xD - Nov 12, 2018
I did not work leader, try anyway and nothing
RE: How to steal Browser Cookies using a RAT - Lot66 - Mar 10, 2019
(Apr 23, 2018 11:27 AM)Thresh Wrote: 1. Open the File Manager
[img]http://up.picr.de/32487325xl.png[/img]
2. Navigate to : "C:\Users\<your_username>\AppData\Local\Google\Chrome\User Data\Default\"
[img]http://up.picr.de/32487346dm.jpg[/img]
Download the "Cookies" file (which is an SQLite database file) and replace it with yours (make a safety copy of yours!).
Preferably you take the whole "User Data" folder and replace it.
After that you can use a Reverse Proxy and Chrome will think you are the Bot.
You can get a Reverse Proxy from QuasarRAT which is free to use and open source.
I hope i could helped someone with that.
Brilliant.
Thank you brotha