mirror of
https://github.com/Mr-xn/Penetration_Testing_POC.git
synced 2025-08-13 03:17:26 +00:00
add some dump chrome saved login,cookies and history
This commit is contained in:
parent
f392645390
commit
09a9f150ed
@ -229,6 +229,7 @@
|
||||
- [又一个各种漏洞poc、Exp的收集或编写](https://github.com/coffeehb/Some-PoC-oR-ExP)
|
||||
- [内网渗透代理转发利器reGeorg](https://github.com/sensepost/reGeorg)|**相关文章:**[配置reGeorg+Proxifier渗透内网](https://www.k0rz3n.com/2018/07/06/如何使用reGeorg+Proxifier渗透内网)|[reGeorg+Proxifier实现内网sock5代理](http://jean.ink/2018/04/26/reGeorg/)|[内网渗透之reGeorg+Proxifier](https://sky666sec.github.io/2017/12/16/内网渗透之reGeorg-Proxifier)|[reGeorg+Proxifier使用](https://xz.aliyun.com/t/228)
|
||||
- [get_Team_Pass-获取目标机器上的teamviewerID和密码(你需要具有有效的目标机器账号密码且目标机器445端口可以被访问(开放445端口))](https://github.com/kr1shn4murt1/get_Team_Pass/)
|
||||
- [chromepass-获取chrome保存的账号密码/cookies-nirsoft出品在win10+chrome 80测试OK](./tools/chromepass/)|[SharpChrome-基于.NET 2.0的开源获取chrome保存过的账号密码/cookies/history](https://github.com/djhohnstein/SharpChrome)|[ChromePasswords-开源获取chrome密码/cookies工具](https://github.com/malcomvetter/ChromePasswords)
|
||||
|
||||
## 书籍相关
|
||||
|
||||
|
BIN
tools/chromepass/ChromePass.chm
Normal file
BIN
tools/chromepass/ChromePass.chm
Normal file
Binary file not shown.
BIN
tools/chromepass/ChromePass.exe
Normal file
BIN
tools/chromepass/ChromePass.exe
Normal file
Binary file not shown.
BIN
tools/chromepass/chromepass.zip
Normal file
BIN
tools/chromepass/chromepass.zip
Normal file
Binary file not shown.
257
tools/chromepass/readme.txt
Normal file
257
tools/chromepass/readme.txt
Normal file
@ -0,0 +1,257 @@
|
||||
|
||||
Zip File Password: chpass9126*
|
||||
|
||||
ChromePass v1.50
|
||||
Copyright (c) 2008 - 2020 Nir Sofer
|
||||
Web site: https://www.nirsoft.net
|
||||
|
||||
|
||||
|
||||
Description
|
||||
===========
|
||||
|
||||
ChromePass is a small password recovery tool that allows you to view the
|
||||
user names and passwords stored by Google Chrome Web browser. For each
|
||||
password entry, the following information is displayed: Origin URL,
|
||||
Action URL, User Name Field, Password Field, User Name, Password, and
|
||||
Created Time. It allows you to get the passwords from your current
|
||||
running system, or from a user profile stored on external drive.
|
||||
You can select one or more items and then save them into text/html/xml
|
||||
file or copy them to the clipboard.
|
||||
|
||||
|
||||
|
||||
Versions History
|
||||
================
|
||||
|
||||
|
||||
* Version 1.50:
|
||||
o Added support for the new password encryption of Chromium /
|
||||
Chrome Web browsers, starting from version 80.
|
||||
o Be aware that the 'Local State' file, located inside the 'User
|
||||
Data' folder (Parent of your Chrome profile folder), is needed for
|
||||
decrypting the passwords of Chrome 80 or later.
|
||||
o In most cases, ChromePass will find your 'Local State' file
|
||||
automatically, but if it fails to find this file from some reason,
|
||||
you can manually type the 'Local State' filename in the 'Advanced
|
||||
Options' window.
|
||||
|
||||
* Version 1.47:
|
||||
o Added new file format to export the passwords: Chrome CSV File.
|
||||
It's the same file format that Chrome Web browser exports the
|
||||
passwords from chrome://settings/passwords
|
||||
|
||||
* Version 1.46:
|
||||
o Fixed bug: When using the 'Advanced external drive settings' in
|
||||
the 'Advanced Options' window, ChromePass displayed an error message.
|
||||
o ChromePass now saves the Advanced external drive settings in the
|
||||
.cfg file.
|
||||
|
||||
* Version 1.45:
|
||||
o Added 'Run As Administrator' option (Ctrl+F11), which allows you
|
||||
to easily run ChromePass as administrator on Windows
|
||||
Vista/7/8/2008/10. You may need to run ChromePass as administrator
|
||||
when reading passwords from external drive.
|
||||
o ChromePass now displays an error message if it cannot access the
|
||||
files on external drive.
|
||||
|
||||
* Version 1.42:
|
||||
o ChromePass now automatically displays the passwords of Vivaldi
|
||||
Web browser.
|
||||
|
||||
* Version 1.41:
|
||||
o Added support for exporting to XML file of Password Exporter
|
||||
Firefox extension, so you can import the passwords of Chrome into
|
||||
Firefox using the this Firefox extension.
|
||||
|
||||
* Version 1.40:
|
||||
o Passwords decryption of external drive / profile now works on all
|
||||
versions of Windows, starting from Windows XP and up to Windows 10 !
|
||||
('Advanced Options' window - F9)
|
||||
o Added advanced external drive settings which allows you to choose
|
||||
the desired Windows Protect folder and the 'User Data' folder of
|
||||
Chrome ('Advanced Options' window - F9).
|
||||
|
||||
* Version 1.37:
|
||||
o Added 'Mark Odd/Even Rows' option.
|
||||
|
||||
* Version 1.36:
|
||||
o Fixed bug: ChromePass failed to export to KeePass csv file.
|
||||
|
||||
* Version 1.35:
|
||||
o ChromePass now also displays the passwords of Opera and Yandex
|
||||
Web browsers (Both of them are based on Chrome...)
|
||||
o Added 'Password File' column.
|
||||
|
||||
* Version 1.32:
|
||||
o Fixed ChromePass to display the correct 'Created Time' on the
|
||||
latest versions of Chrome.
|
||||
|
||||
* Version 1.31:
|
||||
o Fixed ChromePass to display properly user name/password with
|
||||
non-English characters.
|
||||
|
||||
* Version 1.30:
|
||||
o Added option to specify a profile folder ('Use the following
|
||||
profile folder:' check-box)
|
||||
|
||||
* Version 1.27:
|
||||
o Added support for Chromium.
|
||||
|
||||
* Version 1.26:
|
||||
o Removed the command-line options that export the passwords to a
|
||||
file from the official version. A version of this tool with full
|
||||
command-line support will be posted on separated Web page.
|
||||
|
||||
* Version 1.25:
|
||||
o ChromePass now automatically reads the passwords from all
|
||||
profiles of Chrome Web browser.
|
||||
o Fixed issue: The properties dialog-box and other windows opened
|
||||
in the wrong monitor, on multi-monitors system.
|
||||
|
||||
* Version 1.22:
|
||||
o Fixed bug: ChromePass failed to read the password file if the
|
||||
file path contained non-English characters.
|
||||
|
||||
* Version 1.21:
|
||||
o Added support for Chrome Canary.
|
||||
|
||||
* Version 1.20:
|
||||
o Fixed ChromePass to work properly when the password file is
|
||||
locked by Chrome.
|
||||
|
||||
* Version 1.16:
|
||||
o Added an option to export the passwords into KeePass csv file (In
|
||||
'Save Selected Items'). You can use the created csv file to easily
|
||||
import your Web site passwords into KeePass password manager.
|
||||
o Fixed issue: removed the wrong encoding from the xml string,
|
||||
which caused problems to some xml viewers.
|
||||
|
||||
* Version 1.15: Added 'Password Strength' column, which calculates the
|
||||
strength of the password and displays it as Very Weak, Weak, Medium,
|
||||
Strong, or Very Strong.
|
||||
* Version 1.10: Fixed ChromePass to work with the latest versions of
|
||||
Chrome.
|
||||
* Version 1.05: Added support for recovering Chrome passwords from
|
||||
external drive. (In Advanced Options)
|
||||
* Version 1.00: First release.
|
||||
|
||||
|
||||
|
||||
Using ChromePass
|
||||
================
|
||||
|
||||
ChromePass doesn't require any installation process or additional DLL
|
||||
files. In order to start using ChromePass, simply run the executable file
|
||||
- ChromePass.exe After running it, the main window will display all
|
||||
passwords that are currently stored in your Google Chrome browser.
|
||||
|
||||
|
||||
|
||||
Reading ChromePass passwords from external drive
|
||||
================================================
|
||||
|
||||
Starting from version 1.05, you can also read the passwords stored by
|
||||
Chrome Web browser from an external profile in your current operating
|
||||
system or from another external drive (For example: from a dead system
|
||||
that cannot boot anymore). In order to use this feature, you must know
|
||||
the last logged-on password used for this profile, because the passwords
|
||||
are encrypted with the SHA hash of the log-on password, and without that
|
||||
hash, the passwords cannot be decrypted.
|
||||
You can use this feature from the UI, by selecting the 'Advanced Options'
|
||||
in the File menu, or from command-line, by using /external parameter. The
|
||||
user profile path should be something like "C:\Documents and
|
||||
Settings\admin" in Windows XP/2003 or "C:\users\myuser" in Windows
|
||||
10/8/7/Vista/2008.
|
||||
|
||||
|
||||
|
||||
|
||||
Command-Line Options
|
||||
====================
|
||||
|
||||
|
||||
|
||||
/stext <Filename>
|
||||
Save the list of passwords into a regular text file.
|
||||
|
||||
/stab <Filename>
|
||||
Save the list of passwords into a tab-delimited text file.
|
||||
|
||||
/scomma <Filename>
|
||||
Save the list of passwords into a comma-delimited text file.
|
||||
|
||||
/stabular <Filename>
|
||||
Save the list of passwords into a tabular text file.
|
||||
|
||||
/shtml <Filename>
|
||||
Save the list of passwords into HTML file (Horizontal).
|
||||
|
||||
/sverhtml <Filename>
|
||||
Save the list of passwords into HTML file (Vertical).
|
||||
|
||||
/sxml <Filename>
|
||||
Save the list of passwords to XML file.
|
||||
|
||||
/skeepass <Filename>
|
||||
Save the list of passwords to KeePass csv file.
|
||||
|
||||
/spassexp <Filename>
|
||||
Save the list of passwords to XML file of Password Exporter Firefox
|
||||
extension.
|
||||
|
||||
/external <User Profile Path> <Last Log-On Password>
|
||||
Load the Chrome passwords from external drive/profile. For example:
|
||||
chromepass.exe /external "C:\Documents and Settings\admin" "MyPassword"
|
||||
|
||||
|
||||
|
||||
Translating ChromePass to other languages
|
||||
=========================================
|
||||
|
||||
In order to translate ChromePass to other language, follow the
|
||||
instructions below:
|
||||
1. Run ChromePass with /savelangfile parameter:
|
||||
ChromePass.exe /savelangfile
|
||||
A file named ChromePass_lng.ini will be created in the folder of
|
||||
ChromePass utility.
|
||||
2. Open the created language file in Notepad or in any other text
|
||||
editor.
|
||||
3. Translate all string entries to the desired language. Optionally,
|
||||
you can also add your name and/or a link to your Web site.
|
||||
(TranslatorName and TranslatorURL values) If you add this information,
|
||||
it'll be used in the 'About' window.
|
||||
4. After you finish the translation, Run ChromePass, and all
|
||||
translated strings will be loaded from the language file.
|
||||
If you want to run ChromePass without the translation, simply rename
|
||||
the language file, or move it to another folder.
|
||||
|
||||
|
||||
|
||||
License
|
||||
=======
|
||||
|
||||
This utility is released as freeware. You are allowed to freely
|
||||
distribute this utility via floppy disk, CD-ROM, Internet, or in any
|
||||
other way, as long as you don't charge anything for this. If you
|
||||
distribute this utility, you must include all files in the distribution
|
||||
package, without any modification !
|
||||
|
||||
|
||||
|
||||
Disclaimer
|
||||
==========
|
||||
|
||||
The software is provided "AS IS" without any warranty, either expressed
|
||||
or implied, including, but not limited to, the implied warranties of
|
||||
merchantability and fitness for a particular purpose. The author will not
|
||||
be liable for any special, incidental, consequential or indirect damages
|
||||
due to loss of data or any other reason.
|
||||
|
||||
|
||||
|
||||
Feedback
|
||||
========
|
||||
|
||||
If you have any problem, suggestion, comment, or you found a bug in my
|
||||
utility, you can send a message to nirsofer@yahoo.com
|
Loading…
x
Reference in New Issue
Block a user