Investigate stealing credentials from chromium-based browsers

[mssalvatore]

Description

By default, Chromium-based browsers store usernames and passwords in a recoverable format. Investigate whether or not we can steal credentials from chromium-based browsers on Linux and Windows. A good place to start is the "chromium-based" module in the LaZagne project.

Resources

https://apr4h.github.io/2019-12-20-Harvesting-Browser-Credentials/
https://github.com/AlessandroZ/LaZagne/blob/master/Linux/lazagne/softwares/browsers/chromium_based.py

Output

• A prototype script that works on Linux and Windows for stealing browser credentials.
• A list of features or information necessary for the MVP
• A report detailing any caveats, considerations, and future work.

Bonus!

Since Edge is based on Chrome, can we add support for Edge with little or no work?

[shreyamalviya]

poc_steal_windows_google_chrome_saved_credentials.zip

This works for Edge as well.

[shreyamalviya]

poc_steal_linux_chromium_based_browsers_saved_credentials.zip

[shreyamalviya]

Both of the above scripts are stripped-down versions of https://github.com/AlessandroZ/LaZagne/blob/master/Linux/lazagne/softwares/browsers/chromium_based.py and https://github.com/AlessandroZ/LaZagne/blob/master/Windows/lazagne/softwares/browsers/chromium_based.py.

[shreyamalviya]

LaZagne has support for other browsers too. We could implement those as well.

[shreyamalviya]

Updated (generalized) Windows script:

poc_steal_windows_chromium_based_browsers_saved_credentials.zip