Python for Cybersecurity by Howard E. Poston III

Author:Howard E. Poston, III [Poston, Howard E.]
Language: eng
Format: epub
ISBN: 9781119850656
Publisher: Wiley
Published: 2022-03-22T00:00:00+00:00

Google Chrome is one of these web browsers. The code sample ChromeDump.py accesses the data cached by Chrome and decrypts the embedded passwords.

Accessing the Chrome Master Key

Google Chrome uses two levels of encryption to protect user password data. The actual passwords are encrypted with the Advanced Encryption Standard (AES) using a master key protected by the Windows OS.

The encrypted key is stored at C:\Users\<username >\AppData\Local\Google\Chrome\User Data\Local State. This file contains Base64-encoded data stored in the JSON format. Searching inside the file for the string os_crypt will produce something like the following:

"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAALQSdu/Ej6RK7YXNuB2Fp1AAAAAAIAAAAAABBmAAAAAQAAIAAAAJGQbFTfMvSUcBXz3PLtm8HlFeSEt2rRI64CNDwF4IhlAAAAAA6AAAAAAgAAIAAAADPBx4NlvAW3hdkKRF+JD8Qphvwxiy133A0hITOZZVrOMAAAAIDC9er80t1HcTs5ZamQEJIsqdDUNUx+K71TmHW+rV9lDMduEyEi0+CuMNFpYNVZ0EAAAABMPnYPGtM0J4Oncluna4/gbSMgZDkVc3pFBBMdCgh8pJTLguIjOHNG1GFWFreuzOYC/u5/Ez6GzCUoQilQWeMM"}

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.