This content originally appeared on DEV Community and was authored by AndréL
Well normally people save their passwords in chrome and that's nothing new, but where does chrome keep the passwords? Of course it has to be on some computer, of course it is saved on Google's servers, but did you know that it is also saved on your computer and without any protection!
And surely you've seen a YouTube channel get hacked after downloading a program or game, and these disguised malware basically steal a database where Chrome stores passwords.
Windows:
Pressing windows+R and typing: AppData
Next open the folders:
\Local\Google\Chrome\User Data\Default
Linux:
In the terminal type:
cd ~/.config/google-chrome/Default
Inside these folders we will have a file called Login Data with no extension, but it is a sqlite3 database and it contains a lot of information, I will demonstrate how to extract it using sqlite3.
Opening file in sqlite3
Enter the following commands in the terminal:
sqlite3 Login\ Date
.csv mode
.headers on
.separator ","
.output chrome_passwords.csv
select origin_url, username_value, password_value from logins; origin_url|username_value|password_value
This will generate a csv file called: chrome_passwords.csv and this file can be opened in Excel or Pandas for example, note that the passwords will be encrypted, you can use decrypt programs like John the Ripper, but this post is not the best place to teach how to use John the Ripper.
Right here I say goodbye to you!
This content originally appeared on DEV Community and was authored by AndréL
AndréL | Sciencx (2021-08-16T01:58:49+00:00) Chrome “Secret” Passwords. Retrieved from https://www.scien.cx/2021/08/16/chrome-secret-passwords/
Please log in to upload a file.
There are no updates yet.
Click the Upload button above to add an update.