Grabsy

Grabsy is a Chromium password grabber I might add more options later but it's a learning project so far

How it works

The main chromium browsers, seem to all store passwords the same way

The only difference being the path to the location. They are also all stored in a local sqlite database

1st, Get the master key

1st we set the base path for the requested browser then we get an "Encrypted Key" from the "Local State" file; We will also have to decrypt the key on windows using the -> CryptUnprotectData() function the key is inside a large json file, nested under

"os_crypt": {
        "encrypted_key": "...master key is here..."

Open up the local database

Here we try to make a database connection to the local database file. After that connection is established we send a query for all the following values:

"SELECT action_url, username_value, password_value FROM logins"

Decrypt the passwords

At this point all thats left is decrypting the password Thes are encrypted with AES256-GCM - to decrypt we need a

• master key (this is the key we decrypted)
• An Initialization Vector - in this case 12
• Ignore the "v10" prefix
• The rest is the password

example; "v10[..iv..][encrypted password]"