safebreach-labs / doubledrive Goto Github PK

Hi,

When i try to execute the tool endpoint_takeover.exe (also tried with the script itself) i always receive the following error.

Extracting Windows Live ID token from OneDrive's logs
ObfuscationStringMap.txt not found in C:\Users\vmtest\AppData\Local\Microsoft\OneDrive\logs\Personal.
Recovered Unobfuscation key = , version=1, utf_type=utf16
Traceback (most recent call last):
File "endpoint_takeover.py", line 45, in
File "endpoint_takeover.py", line 28, in main
File "doubledrive\endpoint_takeover_utils\token_extraction\onedrive\onedrive_token_extraction.py", line 134, in steal_onedrive_wlid_token
File "doubledrive\endpoint_takeover_utils\token_extraction\onedrive\onedrive_token_extraction.py", line 118, in extract_windows_live_id_from_odls
File "doubledrive\endpoint_takeover_utils\token_extraction\onedrive\odl_parser\odl.py", line 359, in get_odl_rows
File "doubledrive\endpoint_takeover_utils\token_extraction\onedrive\odl_parser\odl.py", line 285, in process_odl
File "construct\core.py", line 288, in parse
File "construct\core.py", line 300, in parse_stream
File "construct\core.py", line 312, in _parsereport
File "construct\core.py", line 2120, in _parse
File "construct\core.py", line 312, in _parsereport
File "construct\core.py", line 2653, in _parse
File "construct\core.py", line 312, in _parsereport
File "construct\core.py", line 1041, in _parse
File "construct\core.py", line 91, in stream_read
construct.core.StreamError: Error in path (parsing) -> data_len
stream read less than specified amount, expected 4, found 3
[6468] Failed to execute script 'endpoint_takeover' due to unhandled exception!

Do you know if there are issues on testing this technique when using personal accounts instead of corporative accounts??