+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Gmail cookie / session hijacking (/showthread.php?tid=6288733)
Gmail cookie / session hijacking - SIM-5514832 - Jan 3, 2025
Yo guys,
currently struggling to get into gmail acc's even tho i have fresh cookies and traffic proxied via the account owners PC, in the past this setup worked for me.
I have seen some posts about Google changing the way they deal with cookies ect, and was wondering what is required these days.
Any help would be greatly appreciated, Thanks!
RE: Gmail cookie / session hijacking - DramaKing - Jan 3, 2025
As long as the cookies are unencrypted, and the owner doesn't sign out, they should be valid. I've never succeeded at this myself for some reason.
RE: Gmail cookie / session hijacking - SIM-5514832 - Jan 3, 2025
(Jan 3, 2025 01:06 PM)DramaKing Wrote: As long as the cookies are unencrypted, and the owner doesn't sign out, they should be valid. I've never succeeded at this myself for some reason.
Yea in theory i dont get why it wont work, i have used remote port debugging dumping and memory dumping (chromekatz) for cookies, so i assume they are good, given then work on other sites also.
But every time i try i get to the page of accounts, all accs are signed out and require to sign in (prompts 2fa) even tho the user has not signed out.
I assume there is some type of device/browser fingerprinting going on, just not sure what exactly :/
RE: Gmail cookie / session hijacking - DramaKing - Jan 3, 2025
(Jan 3, 2025 02:26 PM)SIM-5514832 Wrote: Yea in theory i dont get why it wont work, i have used remote port debugging dumping and memory dumping (chromekatz) for cookies, so i assume they are good, given then work on other sites also.
But every time i try i get to the page of accounts, all accs are signed out and require to sign in (prompts 2fa) even tho the user has not signed out.
I assume there is some type of device/browser fingerprinting going on, just not sure what exactly :/
There must be something in the requests that is different.
RE: Gmail cookie / session hijacking - stillworking247 - Feb 25, 2025
Hi,
It's me, Paris, hit me up (old account stillonline247)
we've lost contact, and i need u asap <3
RE: Gmail cookie / session hijacking - deathinside - Feb 25, 2025
(Jan 3, 2025 02:26 PM)SIM-5514832 Wrote: Yea in theory i dont get why it wont work, i have used remote port debugging dumping and memory dumping (chromekatz) for cookies, so i assume they are good, given then work on other sites also.
But every time i try i get to the page of accounts, all accs are signed out and require to sign in (prompts 2fa) even tho the user has not signed out.
I assume there is some type of device/browser fingerprinting going on, just not sure what exactly :/
Your answer is Chrome Variations Tracking bro. Just Google it you will find out what it is. When you run chrome via obvious; remote debugging or sandbox features, this will be included in your x-variations headers and basically invalidates all of your cookies. I have a better workaround for and I'm developing something better for my workflow but I don't want to publicly disclose the methods and kill it since this kind of forums been actively spied on via white hat intelligence tools
RE: Gmail cookie / session hijacking - crypteer - Feb 25, 2025
Oh Gmail dm me bro om göstersecel
[warn]
RE: Gmail cookie / session hijacking - ·CHESTER· - Jun 5, 2025
Did you ever figure this out? I am having the same problem.
RE: Gmail cookie / session hijacking - Chornaya Magiya - Jun 5, 2025
(Jun 5, 2025 07:45 AM)ChesterMolestor Wrote: Did you ever figure this out? I am having the same problem.
Cookies is enough, but they rotate every some actions.
So if u get cookie and owner with actual session did some actions that past cookies become not valid.
Bypass for that is to sync latest cookies with chrome browser, then u can re-create whole diff session from cookies u had to chrome profile so u are only one who use that new google chrome profile session and cookies never die ✌
RE: Gmail cookie / session hijacking - ·CHESTER· - Jun 5, 2025
(Jun 5, 2025 08:09 AM)Chornaya Magiya Wrote: Cookies is enough, but they rotate every some actions.
So if u get cookie and owner with actual session did some actions that past cookies become not valid.
Bypass for that is to sync latest cookies with chrome browser, then u can re-create whole diff session from cookies u had to chrome profile so u are only one who use that new google chrome profile session and cookies never die ✌
You mentioned that cookies are enough, but in my case, I'm not performing any actions at all. I'm testing with my own cookies. I use PureLogs to extract the cookies while the browser is closed, so no user activity should interfere. Then I recreate the session on another machine, but within half a millisecond of launching it, Google immediately logs me out.
Do you think this could be an issue with PureLogs? Or is it something else?
RE: Gmail cookie / session hijacking - DramaKing - Jun 5, 2025
(Jun 5, 2025 09:02 AM)ChesterMolestor Wrote: You mentioned that cookies are enough, but in my case, I'm not performing any actions at all. I'm testing with my own cookies. I use PureLogs to extract the cookies while the browser is closed, so no user activity should interfere. Then I recreate the session on another machine, but within half a millisecond of launching it, Google immediately logs me out.
Do you think this could be an issue with PureLogs? Or is it something else?
You shouldn't be able to steal cookies with the browser closed anymore.
RE: Gmail cookie / session hijacking - Chornaya Magiya - Jun 8, 2025
(Jun 5, 2025 09:02 AM)ChesterMolestor Wrote: You mentioned that cookies are enough, but in my case, I'm not performing any actions at all. I'm testing with my own cookies. I use PureLogs to extract the cookies while the browser is closed, so no user activity should interfere. Then I recreate the session on another machine, but within half a millisecond of launching it, Google immediately logs me out.
Do you think this could be an issue with PureLogs? Or is it something else?
Stealer fault 100% ✌
Simply just export your cookies using "Cookiebro" extension on firefox.
Then on other device import using "Cookiebro" extension on firefox and u will see it works.