Brave browser shows 0 cookies/passwords despite successful key retrieval.

[mranonymous011000001]

i mostly use brave and i like tried to use this on my browser, it managed to get the decryption keys but it says 0 cookies and etc. but stile i love this project, its greate

[xaitax]

Works perfectly fine for me. Can you please give me -v output?

[gagoatk119]

@xaitax It is the same problem across all browsers: cookies are not being captured if the browser is running or the profile is already in use.

[xaitax]

That wasn't the original question

[gagoatk119]

@xaitax It’s the same issue I raised. Believe me, it’s the same problem: if the browser is running or the profile is in use, it does not retrieve the cookies

[mranonymous011000001]

Works perfectly fine for me. Can you please give me -v output?

PS E:\xxx.git\Chrome-App-Bound-Encryption-Decryption\chromelevator-rs\target\release> ./chromelevator-rs.exe

  ┌──── Brave ────────────────────
  │
  │ Decryption Key
  │ C96F190714D119BADBCF2F7E46B0BBAxxxxxxxxxx
  │
  ├── Default
  │ Success!
  │ Profiles:  1
  │ Cookies:   0
  │ Passwords: 0
  └───────────────────────────────────

  ┌──── Chrome ────────────────────
  │
  │ Decryption Key
  │ 38BA9E09BBC86FC133BE8EAB377398xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
  │
  ├── Default
  │   Passwords   3
  │   Tokens      3
  │
  ├── Guest Profile
  │
  ├── Profile 1
  │   Cookies     613/615
  │   Passwords   2
  │   Tokens      1
  │
  ├── Profile 2
  │   Cookies     1216/1219
  │   Passwords   5
  │
  ├── Profile 3
  │   Cookies     459/460
  │
  ├── Profile 4
  │   Cookies     308/310
  │   Passwords   1
  │
  ├── Profile 5
  │   Cookies     265
  │   Passwords   2
  │
  ├── Profile 6
  │   Cookies     758/760
  │
  ├── Profile 7
  │   Cookies     111
  │   Passwords   1
  │
  ├── Profile 8
  │   Cookies     62
  │ Success!
  │ Profiles:  10
  │ Cookies:   3792
  │ Passwords: 14
  └───────────────────────────────────


Total: 3 Successful, 0 Failed
PS E:\xxx.git\Chrome-App-Bound-Encryption-Decryption\chromelevator-rs\target\release>

i am using same payload just injactor is in rust

[mranonymous011000001]

i am using brave from a year now, it dont get much info and some times it also dont gets 'Default' profile stuff across all the browsers, i solved this by just killing browser then trying then it workes but for brave stile dont work

[xaitax]

Interesting. Would you be willing to share your injector? Again, sorry but cannot reproduce it.

[NUL0x4C]

Hello @xaitax,

I worked on a similar project a while ago (targeting Chrome only: DumpChromeSecrets). I'm currently expanding it to support Edge, and your repo was recommended to me for the Chromium browser support (that's what brought me here).

I ran into the same behavior on Chrome (and I'm guessing it applies to most Chromium-based browsers): the User Data\Default\Network\Cookies file is locked while the browser is running, which broke the copy attempt my implementation does:

Thought this might be useful context, since it appears to match the same cause in this issue.

Thanks!

[xaitax]

Hi @NUL0x4C , in 0.17.2 I added -k. It's not elegant but will solve the locked handles issue.

[gagoatk119]

@xaitax I don’t understand what’s happening. In older versions, you didn’t need to close the browser; you injected the program into the process using the same method. What is the issue that forces you to close the browser?

[xaitax]

@NUL0x4C Little update which should help - also for your tool:

https://github.com/xaitax/Chrome-App-Bound-Encryption-Decryption/releases/tag/v0.17.3

Added handle duplication. No more Cookie issues. :-)

[NUL0x4C]

@xaitax hello, thanks for the info, i already implemented the same logic for my tool!

[mranonymous011000001]

Interesting. Would you be willing to share your injector? Again, sorry but cannot reproduce it.

sure, do i email you files?