+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Pentesting and Forensics (https://hackforums.net/forumdisplay.php?fid=231)
+---- Thread: Session hijacking to bypass 2FA? (/showthread.php?tid=6128012)
Session hijacking to bypass 2FA? - albyaty - Dec 17, 2020
I am currently using a RAT, I am trying to get the cookies or login session for some victims but so far the cookie grabbing plugin that is intergrated in the RAT does not work.
Does anybody have any alternatives that I can use in this case? Will I have to run a kali virtual machine and use evilginx2? are there any other options?
if I already have access to the victim's PC, is it that hard to grab the cookie?
Thanks in advance for the help! 😁😁
RE: Session hijacking to bypass 2FA? - Mr zero 0 - Dec 21, 2020
You need to get a new rat friend, seems like your's is outdated, but then after you get it you can just use it in the browser that all the spoofers use I forgot the name atm tho lol xD but it allows user agents, cookies, proxy, and all other
all the carders use it
RE: Session hijacking to bypass 2FA? - smokey1 - Jan 11, 2021
yes, a new rat is what u need. inbox me i might have an idea for u
RE: Session hijacking to bypass 2FA? - Jaxsu - Jan 11, 2021
What browser are you trying to session hijack? Different browsers handle secrets differently. IE stores it in a Dat file, Firefox in a sqlite dB, and chrome (and edge) with dpapi encryption. So you need to target a specific browser
RE: Session hijacking to bypass 2FA? - Sandikaaa - Jan 12, 2021
just use evilginx2 and patch hosts file its simple ?
RE: Session hijacking to bypass 2FA? - Dolla$ - Jan 13, 2021
Just bind an exenstion on the target navitor, get the cookie throught it.
RE: Session hijacking to bypass 2FA? - albyaty - Jan 16, 2021
(Jan 11, 2021 10:15 PM)Jaxsu Wrote: What browser are you trying to session hijack? Different browsers handle secrets differently. IE stores it in a Dat file, Firefox in a sqlite dB, and chrome (and edge) with dpapi encryption. So you need to target a specific browser
The victim's browser is chrome
I got the cookie file but it is encrypted and looks useless as far as i can tell.
(Jan 13, 2021 01:44 AM)Jean Valjean Wrote: Just bind an exenstion on the target navitor, get the cookie throught it.
What kind of an extension?
(Dec 21, 2020 01:41 PM)Mr zero 0 Wrote: You need to get a new rat friend, seems like your's is outdated, but then after you get it you can just use it in the browser that all the spoofers use I forgot the name atm tho lol xD but it allows user agents, cookies, proxy, and all other
all the carders use it
If you can get me more info I'd really appreciate it, thanks friend.
RE: Session hijacking to bypass 2FA? - gucciuser - Jan 23, 2021
Just probably use something like hidden RDP and then capture the cookies from the requests?