rxwx / chlonium Goto Github PK

Hi!

The license for this repository is currently missing.
Would you be able to add a license (e.g. MIT license)?

Why do I get so many errors on build?

C:\Users\Mike\Documents\Python.vscode\chlonium\ChloniumUI\ImportMethods.cs(3,19): error CS0234: The type or namespace name 'SQLite' does n
ot exist in the namespace 'System.Data' (are you missing an assembly reference?) [C:\Users\Mike\Documents\Python.vscode\chlonium\ChloniumU
I\ChloniumUI.csproj]
C:\Users\Mike\Documents\Python.vscode\chlonium\ChloniumUI\AesCrypto.cs(2,7): error CS0246: The type or namespace name 'PInvoke' could not
be found (are you missing a using directive or an assembly reference?) [C:\Users\Mike\Documents\Python.vscode\chlonium\ChloniumUI\Chlonium
UI.csproj]
C:\Users\Mike\Documents\Python.vscode\chlonium\ChloniumUI\AesCrypto.cs(5,14): error CS0246: The type or namespace name 'PInvoke' could not
be found (are you missing a using directive or an assembly reference?) [C:\Users\Mike\Documents\Python.vscode\chlonium\ChloniumUI\Chloniu
mUI.csproj]

these are 3 of 8 errors alone

Hi Mate, thanks for the continued work on this project.

On a recent engagement, two questions came up during our debrief and report writing:

1 - Importing google cookies results in the user being signed out of google services. I am thinking it's unrelated to Chlonium, but have you heard this? For example, Chrome user is signed into gmail and going to google.com shows the profile pic. These cookies are dumped are transferred to our purple team's VM and imported with ChloniumUI into Chrome. Going to google.com will show their profile pic, but clicking on it and going to google services shows the user is signed out. I'm thinking Google is using some identity checks, but wanted to fancy your opinion on this.
2 - What format are the cookies exported in? Is there an option to export using the netscape cookie format? One of our team members has a firefox add-on that he swears to use and would like to important cookies into this browser. He tried importing into Chrome, then exporting using a Chrome extension, but it didn't work.

Thanks mate for the time and lovely project.

Thank you so much mate for adding offline decryption. It's been truly lovely.

I am using the latest code and cannot select Chrome as the browser to import to. Edge is always an option, but Chrome is not. I wish I could provide more details, but cannot clue in to the issue. Have you seen this?

A little tidbit if it matters, Chrome has moved the Cookies file to the Network folder.

This app has been a lifesaver mate. All props to you.

Mate, thanks for a lovely project. Agree completely that importing cookies can be so difficult.

My question is, is there a way to obtain the chrome master key completely offline? On a recent engagement, i have the windows
master keys, local state file, and cookies file, but cannot run the first app on the clients computer to decode the chrome master key.

Cheers.
Olly

Hi Mate,

Running into an issue with the latest code from Feb. I'm getting an error that says:

constraint failed
NOT NULL constraint failed: cookies.last_update_utc

The cookies are not replaced and a backup of the cookies is made in the current folder.

Any tips you can throw my way to rectify this?

Thanks mate.

Edge Version 96.0.1054.62 give constraint fail and never import the cookies

On a fresh install of Chrome 89.0.4389.90 the "preferred" column is omitted from the Login Data "logins" table.

Removing this entry and shifting the indexes accordingly, it seems to work fine.

I don't have other Login Data dbs to compare to, but could probably cater to both db schemas with a check for the 9th field name or count of fields in total?

Hi, in the case cookies are already decrypted in the sqllite3 file is there a way to import them on to a new machine?

Hi, do you mind taking a look at the UI? I tried to compile it on 4 computers and it fails on every one of them:

Severity Code Description Project File Line Suppression State
Warning The referenced component 'System.Data' could not be found. ChloniumUI
Error A numeric comparison was attempted on "$(MsBuildMajorVersion)" that evaluates to "" instead of a number, in condition "($(MsBuildMajorVersion) < 16)". ChloniumUI
Warning The referenced component 'PresentationCore' could not be found. ChloniumUI
Warning The referenced component 'PInvoke.Windows.Core' could not be found. ChloniumUI
Warning The referenced component 'PresentationFramework' could not be found. ChloniumUI
Warning The referenced component 'System' could not be found. ChloniumUI
Warning The referenced component 'System.Xml' could not be found. ChloniumUI
Warning The referenced component 'WindowsBase' could not be found. ChloniumUI
Warning The referenced component 'Costura' could not be found. ChloniumUI
Warning The referenced component 'System.Data.SQLite' could not be found. ChloniumUI
Warning The referenced component 'PInvoke.Kernel32' could not be found. ChloniumUI
Warning The referenced component 'System.Core' could not be found. ChloniumUI
Warning The referenced component 'System.Xml.Linq' could not be found. ChloniumUI
Warning The referenced component 'Microsoft.CSharp' could not be found. ChloniumUI
Warning The referenced component 'System.Xaml' could not be found. ChloniumUI
Warning The referenced component 'PInvoke.BCrypt' could not be found. ChloniumUI
Warning The referenced component 'System.Security' could not be found. ChloniumUI
Warning The referenced component 'System.Data.DataSetExtensions' could not be found. ChloniumUI
Warning IDE0006 Error encountered while loading the project. Some project features, such as full solution analysis for the failed project and projects that depend on it, have been disabled. ChloniumUI 1 Active

I did a robocopy /mir of my old hard drive and want to import the cookies in chrome again. I found all the necessary folders to make a offline backup with:

D:\Users\<user>\AppData\Roaming\Microsoft\Protect\<sid>
D:\Users\<user>\AppData\Local\Google\Chrome\User Data\Local State

but when it comes to the NTDS.DIT file with the .pvk file it is not there. I don't even have this folder. I searched the whole drive for NTDS or .pvk and I cannot find it. I had a Windows 11 system.

I tried the password option but I am not sure what password it is. Probably the windows login password. I used an online windows account to sign in. That password seems not working :(

Any suggestions?