-
Notifications
You must be signed in to change notification settings - Fork 230
Open
Description
Hi Will,
I think This command doesn't work anymore: SharpChrome.exe cookies /unprotect
since the location of the cookie file is now C:\Users*\AppData\Local\Google\Chrome\User Data\Default\Network.
output taken From the BH2022 ATTA lab:
__ _
(_ |_ _. ._ ._ / |_ ._ _ ._ _ _
__) | | (_| | |_) \_ | | | (_) | | | (/_
|
v1.11.1
[*] Action: Chrome Saved Cookies Triage
[*] Triaging non-expired cookies. Use '/showall' to display ALL cookies.
[*] Triaging Chrome Cookies for current user
[*] AES state key file : C:\Users\thor\AppData\Local\Google\Chrome\User Data\Local State
[*] AES state key : 001B279C498A9BA70B76E301E45D7B2752475FEFA2690EAA17BAE06616489018
Metadata
Metadata
Assignees
Labels
No labels