Hi, thanks for the video. Is it possible to re-gain the original passwords? Two accounts on my password manager have been corrupted, how can i regain the original passwords
bro when i get these tow files in another pc and when we run the code (after editing file path in code) it shows Chrome secretkey cannot be found error how to fix that problem
Check the issue page github.com/ohyicong/decrypt-chrome-passwords/issues if your error message exist there if not you can send screenshots of your error page to ctfsec001@gmail.com
When you turn on the "Sync" feature in Google Chrome, your passwords are encrypted and saved locally on your device, but they are also synced with your Google account's cloud storage for access across devices. If you don't sync your data, the passwords are only stored locally on your device. So it should still work
I'm confused in the area where it glitches and you run the script. How do you change it to .py mid line. Can you help me go from where you were to running the script? I just get the line ending in default\login data, but no user info
@ctf-sec maybe I am running it correctly, but it doesn't pull up logins or users or anything. Just the one line that listing the location of login data basically. I am logged into Google account, and when I open the file in notepad I can see the encrypted key and so forth, so there must be data to show, but nothing decrypts and shows up for me. Hopefully that's more clear
@@123bballtime Did you verify the location of your login data and user data C:\Users\YourUserName\AppData\Local\Google\Chrome\User Data\Default\Login Data
@123bballtime, use this i think your referring to the timestamp 13:22, "PROMPT (chromeenv) C:\Userpython decrypt_chrome_passwords.py-chrome-passwords$G"
Dear Thanks for this video , actually my pc crashed i took out hdd and manage to get profile folder from it and copy/paste it in the new pc but when i run the final command i only get ''c:\users\xxx\AppData\Local\Google\Chrome\User Data\Profile\Login Data'' thats it no passwords.... please help
Did you copy it to the right location checkout support.google.com/chrome/thread/215059006/transfer-all-chrome-data-from-one-profile-to-another?hl=en-GB
Yes If the HDD is still in good state you can manually copy Chrome or Firefox profile data from a crashed PC to another PC then extract the passwords from the new PC you have to take note of the profile data location though.
@@darshan41973 The script operates on data stored locally on the user's computer within the Chrome browser's user data folder. It does not interact with Google's online account storage or retrieve data from the cloud. If the password still exists in your chrome profile locally you should be able to extract it.
@@darshan41973 First try the script if it does not work you can try data recovery tool like recuver to retrieve deleted login data file then try the script again.
hi, my gmail account has been hacked, and the passeword has been changed, and all information to recovry also was deleted, so i can acces on my e-mail, i've already try recovry methode but nothing, so can you help me please.
It can only be done if I'm logged in on the same user account and does not work if I'm logged in on another user account. If I was logged in on the user account I'd just go to password manager and extract passwords. There is no need to install python to do this. What a load of crap
Thank you for sharing your thoughts. I appreciate your feedback, and I'm open to constructive criticism. However always review the source code. The specified payload path indicates extraction for all current user profiles, and not different host or user accounts. Import the profile to your new user accounts, run the code, or better still consider modifying it since it's open source.
@@ctf-sec excuse me this only works if im logged ? I cant log anymore in my account but I have the files data my account was deleted. I really need certains passwrods of sites what cant create new accounts anymore.
In a secure and standard authentication system, passwords are not stored directly in cookies. Instead, a secure approach involves storing a unique identifier or token in the cookie that the server can use to identify the user and manage their session.
@@ctf-sec believe it or not, I figured out a way to get it done. I just copy and pasted the login data/local state from Brave into Google > User Data folders that I just created!
WOW man great video. enjoyed it!
Thank you for your feedback.
Awesome video! It highlights the importance of staying vigilant. Just a second of distraction can make us vulnerable to cyber attacks.
Great Video 👌! It does not only teach how to do it but also the concept.
great video....
Please make a video on Decrypting Firefox passwords.
Sure, coming up on the Channel.
Doesn't ChromePass do the same? It seems like a lot of work compared to a single exe file that dumps it for me.
Yeah very much similar to chromepass. But you have total control over this script compared to exe
Hi, thanks for the video. Is it possible to re-gain the original passwords? Two accounts on my password manager have been corrupted, how can i regain the original passwords
If the datas are still in the appropriate directories it should be possible.
@@ctf-sec Great! how is it possible?
Any steps to follow?
bro when i get these tow files in another pc and when we run the code (after editing file path in code) it shows Chrome secretkey cannot be found error how to fix that problem
Check the issue page github.com/ohyicong/decrypt-chrome-passwords/issues if your error message exist there if not you can send screenshots of your error page to ctfsec001@gmail.com
Yo, bro, your pic's all up in front of the code!
Noted
If sync is activated on the Google account, the AES key will no longer be local and the procedure is not valid, right?
When you turn on the "Sync" feature in Google Chrome, your passwords are encrypted and saved locally on your device, but they are also synced with your Google account's cloud storage for access across devices. If you don't sync your data, the passwords are only stored locally on your device. So it should still work
@@ctf-sec I confirm that I tried with macos and even with sync everything always works because it manages locally in the same way.
Yes the difference is that it synchronizes with your Google account in a situation you using a different device
I'm confused in the area where it glitches and you run the script. How do you change it to .py mid line. Can you help me go from where you were to running the script? I just get the line ending in default\login data, but no user info
Can u be a bit specific on the timestamp you are talking about.
@ctf-sec maybe I am running it correctly, but it doesn't pull up logins or users or anything. Just the one line that listing the location of login data basically. I am logged into Google account, and when I open the file in notepad I can see the encrypted key and so forth, so there must be data to show, but nothing decrypts and shows up for me. Hopefully that's more clear
@@123bballtime Did you verify the location of your login data and user data
C:\Users\YourUserName\AppData\Local\Google\Chrome\User Data\Default\Login Data
@ctf-sec yes, that is the location that appears. But that's the only thing that appears. No information and decrypted data under it.
@123bballtime, use this i think your referring to the timestamp 13:22, "PROMPT (chromeenv) C:\Userpython decrypt_chrome_passwords.py-chrome-passwords$G"
Dear Thanks for this video , actually my pc crashed i took out hdd and manage to get profile folder from it and copy/paste it in the new pc but when i run the final command i only get ''c:\users\xxx\AppData\Local\Google\Chrome\User Data\Profile\Login Data'' thats it no passwords.... please help
Did you copy it to the right location checkout support.google.com/chrome/thread/215059006/transfer-all-chrome-data-from-one-profile-to-another?hl=en-GB
you got it? Im in the same situation
@@aliencga you got it ? I'm me too in the same situation
this only works on Chrome version 80 right ? not working on chrome 88
Should work on version 88
my pc crash but still i save all the data of chrome , can you tell me it is possible to recover password form that
Yes If the HDD is still in good state you can manually copy Chrome or Firefox profile data from a crashed PC to another PC then extract the passwords from the new PC you have to take note of the profile data location though.
I downloaded Python, but I don't have "pip" and you didn't give a tutorial on how to install pip onto python...
Pip comes pre installed with python3
How ever here is a guide on how to install pip phoenixnap.com/kb/install-pip-windows
@@ctf-sec thank you so much
I have deleted the password from Google can i get back that through this?
If your chrome profile is still intact you should be able to do that.
@@ctf-sec I have the Google account but i accidentally deleted the saved password can i retrieve that through your above video??
@@darshan41973 The script operates on data stored locally on the user's computer within the Chrome browser's user data folder. It does not interact with Google's online account storage or retrieve data from the cloud. If the password still exists in your chrome profile locally you should be able to extract it.
@@ctf-sec is there any way i can retrieve that deleted password???
@@darshan41973 First try the script if it does not work you can try data recovery tool like recuver to retrieve deleted login data file then try the script again.
hi, my gmail account has been hacked, and the passeword has been changed, and all information to recovry also was deleted, so i can acces on my e-mail, i've already try recovry methode but nothing, so can you help me please.
If you are unable to recover your account through standard procedures, contact Facebook support directly for assistance.
@@ctf-sec it's not facebook but google gmail.
It can only be done if I'm logged in on the same user account and does not work if I'm logged in on another user account. If I was logged in on the user account I'd just go to password manager and extract passwords. There is no need to install python to do this. What a load of crap
Thank you for sharing your thoughts. I appreciate your feedback, and I'm open to constructive criticism. However always review the source code. The specified payload path indicates extraction for all current user profiles, and not different host or user accounts. Import the profile to your new user accounts, run the code, or better still consider modifying it since it's open source.
sorry Im very noob git clone is not reconized how I install it ?
Download and install git git-scm.com/
@@ctf-sec excuse me this only works if im logged ? I cant log anymore in my account but I have the files data my account was deleted. I really need certains passwrods of sites what cant create new accounts anymore.
sir can i decrypt password from cookies
In a secure and standard authentication system, passwords are not stored directly in cookies. Instead, a secure approach involves storing a unique identifier or token in the cookie that the server can use to identify the user and manage their session.
Depending on the encryption used it might still be possible but in rear cases will the cookie contain passwords data.
Will this work for Brave browser passwords?
The script used in this video work for only Chrome browser I have another video for Firefox but haven't done any for brave yet.
@@ctf-sec believe it or not, I figured out a way to get it done. I just copy and pasted the login data/local state from Brave into Google > User Data folders that I just created!
Can you make a video on brave please?