Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Decrypting Chrome's Login.data ?

Hi guys ,

Is there a way for descrypt google chrome's login.data file of some else's PC ???

Thanks,
(Sep 13, 2014 08:31 PM)banees8080 Wrote:  Hi guys ,

Is there a way for descrypt google chrome's login.data file of some else's PC ???

Thanks,

Do you have the files? I could take a look at it. I'm pretty sure it's encrypted against one password for all of it. Triple DES.
My PGP key is available here: https://keybase.io/chick3nman
[Image: keCy9xR.png]
BTC: 1Chick3nMTco6sBEByKuvmAzYTBsGN5KzD
In Windows, Chrome uses the Data Protection API (DPAPI) to Triple DES using your Windows user's password. This means that every other program running under your Windows user is able to decrypt the login data. In fact, that's how tools like ChromePass and ChromePasswordDecryptor work. They only decrypt the file and reveal the passwords only if you run them on the same system that encrypted the file (or, perhaps, provide the victim's Windows password).

If the attacker was only able to acquire the Login Data file (for example, you had the file on your memory stick and it was stolen/lost), then your login data are protected as strongly as your Windows password is.
"It's the thought that counts"
"No it's actually taking the bullet that counts!"
[Image: eCW5BIe.gif]
(Sep 13, 2014 08:37 PM)chick3nman Wrote:  Do you have the files? I could take a look at it. I'm pretty sure it's encrypted against one password for all of it. Triple DES.

Not yet , But I will get the soon :)
(Sep 13, 2014 08:39 PM)killerxknight Wrote:  In Windows, Chrome uses the Data Protection API (DPAPI) to Triple DES using your Windows user's password. This means that every other program running under your Windows user is able to decrypt the login data. In fact, that's how tools like ChromePass and ChromePasswordDecryptor work. They only decrypt the file and reveal the passwords only if you run them on the same system that encrypted the file (or, perhaps, provide the victim's Windows password).

If the attacker was only able to acquire the Login Data file (for example, you had the file on your memory stick and it was stolen/lost), then your login data are protected as strongly as your Windows password is.

I read that one too. I'm not sure if the file itself is encrypted or if each password is encrypted with DES individually. If the whole file is encrypted with DES, then i wont be able to crack it with any tools i have. If its just the passwords in the file, i should be able to feed them into something as text and try to crack them. Even oclHashcat supports some forms of DES.
My PGP key is available here: https://keybase.io/chick3nman
[Image: keCy9xR.png]
BTC: 1Chick3nMTco6sBEByKuvmAzYTBsGN5KzD
Sorry guys , was away for some days.
I have the Login.data file , Who can help me to crack it ?

Cheers !
Bump !! Anyone who can help me ??

xxxxxx
Well, if you post a link to the login.data people could have a go at it.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by shatacocolohOct 12, 2024 03:47 PM 1 120 Oct 12, 2024 03:47 PM
Last Post: DramaKing
by DramaKingDec 14, 2023 04:21 PM 10 561 Dec 14, 2023 04:21 PM
Last Post: Silkroad
by a3_smurfOct 7, 2020 02:05 AM 2 147 Oct 7, 2020 02:05 AM
Last Post: Berithoras