-
Notifications
You must be signed in to change notification settings - Fork 11
/
Copy pathdiana-browserdec.py
345 lines (317 loc) · 19.1 KB
/
diana-browserdec.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
#!/usr/bin/python3
# -*- coding: utf-8 -*-
r'''
Copyright 2024, Tijl "Photubias" Deneut <@tijldeneut>
This script provides offline decryption of Chromium based browser user data: Google Chrome, Edge Chromium and Opera
Credentials (and cookies) are encrypted using a Browser Master Encryption key.
This BME key is encrypted using DPAPI in the file "Local State", mostly located at
%localappdata%\{Google/Microsoft}\{Chrome/Edge}\User Data
or %appdata%\Opera Software\Opera Stable
This BME key can then be used to decrypt (AES GCM) the login data and cookies, mostly located at
%localappdata%\{Google/Microsoft}\{Chrome/Edge}\User Data\Default\
or %appdata%\Opera Software\Opera Stable\
DPAPI decrypting the BME key is the hard part. It uses the user DPAPI Masterkey secret from a DPAPI Masterkey file (MK file).
To identify which DPAPI Masterkey file, the browser "Local State" file contains the cleartext GUID, which is the filename of the MK file
Usually this DPAPI MK file is located at
%appdata%\Microsoft\Protect\<SID>\<GUID>
This DPAPI Masterkey secret is 64bytes in length and can be found either encrypted in lsass memory or encrypted inside the above MK file
The secret within the MK file can be decrypted either via Local AD Domain RSA Key or using local user details
- Local User Details are user SID + SHA1 password hash or sometimes user SID + NTLM password hash (on AzureAD only systems there are no local details and lsass is the only way for now)
- AD Domain RSA Key is the PVK export containing details to construct a private/public RSA encryption certificate, having this and the user MK file can decrypt all domain members
## Generating a list of decrypted MK's can be done with mkudec.py:
e.g. mkudec.py %appdata%\Roaming\Microsoft\Protect\<SID>\* -a <hash> | findstr Secret > masterkeylist.txt
#> and remove all strings ' Secret:'
'''
import argparse, os, json, base64, sqlite3, time, warnings, re
from Crypto.Cipher import AES
warnings.filterwarnings('ignore')
try:
from dpapick3 import blob, masterkey, registry
except ImportError:
raise ImportError('Missing dpapick3, please install via pip install dpapick3')
def parseArgs():
print('[!] Welcome. To decrypt, one of four combo\'s is required: \n'
'Decrypted Masterkey / file containing decrypted Masterkeys / MK file, SID and User Pwd or Hash / MK file and Domain PVK\n'
'Browser data can be found here:\n'
'%localappdata%\\{Google/Microsoft}\\{Chrome/Edge}\\User Data\\Local State\n'
'Passwords in subfolder Default\\Login Data\n'
'Cookies in subfolder Default\\Network\\Cookies\n')
oParser = argparse.ArgumentParser()
oParser.add_argument('--statefile', '-t', metavar='FILE', help='Browser Local State file', default='Local State')
oParser.add_argument('--loginfile', '-l', metavar='FILE', help='Browser Login Data file (optional)')
oParser.add_argument('--cookies', '-c', metavar='FILE', help='Browser Cookies file (optional)')
oParser.add_argument('--masterkey', '-k', metavar='HEX', help='Masterkey, 128 HEX Characters or in SHA1 format (optional)')
oParser.add_argument('--systemmasterkey', '-y', metavar='FOLDER', default=os.path.join('Windows','System32','Microsoft','Protect','S-1-5-18','User'), help=r'System Masterkey folder')
oParser.add_argument('--masterkeylist', '-f', metavar='FILE', help='File containing one or more masterkeys for mass decryption (optional)')
oParser.add_argument('--mkfile', '-m', metavar='FILE', help='GUID file or folder to get Masterkey(s) from (optional)')
oParser.add_argument('--sid', '-s', metavar='SID', help='User SID (optional)')
oParser.add_argument('--system', '-e', metavar='HIVE', default=os.path.join('Windows','System32','config','SYSTEM'), help='System Registry file (optional)')
oParser.add_argument('--security', '-u', metavar='HIVE', default=os.path.join('Windows','System32','config','SECURITY'), help='Security Registry file (optional)')
oParser.add_argument('--pwdhash', '-a', metavar='HASH', help='User password SHA1 hash (optional)')
oParser.add_argument('--password', '-p', metavar='PASS', help='User password (optional)')
oParser.add_argument('--pvk', '-r', metavar='FILE', help='AD RSA cert in PVK format (optional)')
oParser.add_argument('--export', '-o', metavar='FILE', help='CSV file to export credentials to (optional)')
oParser.add_argument('--verbose', '-v', action = 'store_true', default = False, help='Print decrypted creds/cookies to console (optional)')
oArgs = oParser.parse_args()
if not os.path.isfile(oArgs.statefile): exit('[-] Error: Please provide Local State file')
if oArgs.loginfile and not os.path.isfile(oArgs.loginfile): exit('[-] Error: File not found: ' + oArgs.loginfile)
if oArgs.cookies and not os.path.isfile(oArgs.cookies): exit('[-] Error: File not found: ' + oArgs.cookies)
if oArgs.masterkeylist and not os.path.isfile(oArgs.masterkeylist): exit('[-] Error: File not found: ' + oArgs.masterkeylist)
if oArgs.pvk and not os.path.isfile(oArgs.pvk): exit('[-] Error: File not found: ' + oArgs.pvk)
if oArgs.mkfile: oArgs.mkfile = oArgs.mkfile.replace('*','')
if oArgs.mkfile and not os.path.isfile(oArgs.mkfile) and not os.path.isdir(oArgs.mkfile): exit('[-] Error: File/folder not found: ' + oArgs.mkfile)
if not os.path.isfile(oArgs.system): oArgs.system = None
if not os.path.isfile(oArgs.security): oArgs.security = None
if not os.path.isdir(oArgs.systemmasterkey): oArgs.systemmasterkey = None
if oArgs.mkfile and not oArgs.sid:
try:
oArgs.sid = re.findall(r"S-1-\d+-\d+-\d+-\d+-\d+-\d+", oArgs.mkfile)[0]
print('[+] Detected SID: ' + oArgs.sid)
except: pass
if oArgs.mkfile and oArgs.sid and not oArgs.password and not oArgs.pwdhash:
oArgs.pwdhash = 'da39a3ee5e6b4b0d3255bfef95601890afd80709'
# On older systems: oArgs.pwdhash = '31d6cfe0d16ae931b73c59d7e0c089c0'
print('[+] No password data provided, using empty hash')
if oArgs.pwdhash: oArgs.pwdhash = bytes.fromhex(oArgs.pwdhash)
return oArgs
def parseLocalState(sLocalStateFile):
try:
with open(sLocalStateFile, 'r') as oFile: lLocalState = json.loads(oFile.read())
oFile.close()
bDPAPIBlob = base64.b64decode(lLocalState['os_crypt']['encrypted_key'])[5:]
if 'app_bound_encrypted_key' in lLocalState['os_crypt']:
bABESystemData = base64.b64decode(lLocalState['os_crypt']['app_bound_encrypted_key']).strip(b'\x00')
if bABESystemData[:4] == b'APPB': oABESystemBlob = blob.DPAPIBlob(bABESystemData[4:])
except Exception as e:
print(f'[-] Error: file {sLocalStateFile} not a (correct) State file')
print(e)
return False, None
oBlob = blob.DPAPIBlob(bDPAPIBlob)
return oBlob, oABESystemBlob
def parseLoginFile(sLoginFile, lstGUIDs):
lstLogins = []
oConn = sqlite3.connect(sLoginFile)
oConn.text_factory = lambda b: b.decode(errors = 'ignore')
oCursor = oConn.cursor()
try:
oCursor.execute('SELECT origin_url, username_value, password_value FROM logins')
for lstData in oCursor.fetchall():
#print(lstData[0])
if lstData[2][:4] == b'\x01\x00\x00\x00':
oBlob = blob.DPAPIBlob(lstData[2])
if not oBlob.mkguid in lstGUIDs: lstGUIDs.append(oBlob.mkguid)
lstLogins.append((lstData[0], lstData[1], lstData[2]))
except Exception as e:
print('[-] Error reading Login Data file, make sure it is not in use.')
print(e)
oCursor.close()
oConn.close()
return lstLogins, lstGUIDs ## lstLogins = list of lists (url, username, blob)
def parseCookieFile(sCookieFile, lstGUIDs):
lstCookies = []
oConn = sqlite3.connect(sCookieFile)
oCursor = oConn.cursor()
try:
oCursor.execute('SELECT name, CAST(encrypted_value AS BLOB), host_key, path, is_secure, is_httponly, creation_utc, expires_utc FROM cookies ORDER BY host_key')
for lstData in oCursor.fetchall():
if lstData[1][:4] == b'\x01\x00\x00\x00':
oBlob = blob.DPAPIBlob(lstData[1])
if not oBlob.mkguid in lstGUIDs: lstGUIDs.append(oBlob.mkguid)
lstCookies.append((lstData[0], lstData[1], lstData[2], lstData[3], lstData[4], lstData[5], lstData[6], lstData[7]))
except Exception as e:
print('[-] Error reading Cookies file, make sure it is not in use.')
print(e)
exit()
oCursor.close()
oConn.close()
return lstCookies, lstGUIDs ## lstCookies = list of lists (name, blob, domain, path, secureconnection, httponly, created, expires)
def tryDPAPIDecrypt(oBlob, bMasterkey):
try:
if oBlob.decrypt(bMasterkey): return oBlob.cleartext
except: pass
return None
def decryptChromeString(bData, bBMEKey, lstMasterkeys, boolVerbose = False):
if bData[:4] == b'\x01\x00\x00\x00':
oBlob = blob.DPAPIBlob(bData)
for bMK in lstMasterkeys:
oBlob.decrypt(bMK)
if oBlob.decrypted: return oBlob.cleartext.decode(errors='ignore')
elif bData[:3] == b'v20' or bData[:3] == 'v20': ## Version|IV|ciphertext|tag, 3|12|<var>|16 bytes
## New Encryption Scheme, need SYSTEM DPAPI key
bIV = bData[3:15]
bEncrypted = bData[15:-16]
bTag = bData[-16:]
oCipher = AES.new(bBMEKey, AES.MODE_GCM, bIV)
bDecrypted = oCipher.decrypt(bEncrypted)
return bDecrypted[32:].decode(errors='ignore')
else: ## Version|IV|ciphertext, 4|12|<var>
try:
bIV = bData[3:15]
bEncrypted = bData[15:]
oCipher = AES.new(bBMEKey, AES.MODE_GCM, bIV)
bDecrypted = oCipher.decrypt(bEncrypted)
try: return bDecrypted[:-16].decode()
except: return ''
#return bDecrypted[:-16].decode(errors='ignore')
except:
if boolVerbose: print('[-] Error decrypting, maybe Browser Engine < v80')
pass
return None
def decryptLogins(lstLogins, bBrowserBMEKey, lstMasterkeys, sCSVFile = None, boolVerbose = False):
iDecrypted = 0
if sCSVFile:
oFile = open('logins_' + sCSVFile, 'a')
oFile.write('URL;Username;Password\n')
for lstLogin in lstLogins:
sDecrypted = decryptChromeString(lstLogin[2], bBrowserBMEKey, lstMasterkeys)
if boolVerbose:
print('URL: {}'.format(lstLogin[0]))
print('User Name: {}'.format(lstLogin[1]))
print('Password: {}'.format(sDecrypted))
print('*' * 50)
if sDecrypted != None: iDecrypted += 1
if sCSVFile: oFile.write('{};{};{}\n'.format(lstLogin[0], lstLogin[1], sDecrypted))
if sCSVFile: oFile.close()
return iDecrypted
def decryptCookies(lstCookies, bBrowserBMEKey, lstMasterkeys, sCSVFile = None, boolVerbose = False):
iDecrypted = 0
if sCSVFile:
oFile = open('cookies_' + sCSVFile, 'a')
oFile.write('name;value;host_key;path;is_secure;is_httponly;creation_utc;expires_utc\n')
for lstCookie in lstCookies:
decryptChromeString(lstCookie[1], bBrowserBMEKey, lstMasterkeys)
try:
sDecrypted = decryptChromeString(lstCookie[1], bBrowserBMEKey, lstMasterkeys)
## Chrome timestamp is "amount of microseconds since 01-01-1601", so we need math
sCreated = time.strftime('%Y-%m-%d %H:%M:%S', time.localtime(lstCookie[6] / 1000000 - 11644473600))
sExpires = time.strftime('%Y-%m-%d %H:%M:%S', time.localtime(lstCookie[7] / 1000000 - 11644473600))
except:
continue
if boolVerbose:
print('Name: {}'.format(lstCookie[0]))
print('Content: {}'.format(sDecrypted))
print('Domain: {}'.format(lstCookie[2]))
print('Path: {}'.format(lstCookie[3]))
if lstCookie[4] == 1: print('Send for: Secure connections only')
else: print('Send for: Any kind of connection')
if lstCookie[5] == 1: print('HttpOnly: Yes')
else: print('HttpOnly: No (Accessible to scripts)')
print('Created: {}'.format(sCreated))
print('Expires: {}'.format(sExpires))
print('*' * 50)
if sDecrypted: iDecrypted += 1
if sCSVFile: oFile.write('{};{};{};{};{};{};{};{}\n'.format(lstCookie[0], sDecrypted, lstCookie[2], lstCookie[3], lstCookie[4], lstCookie[5], lstCookie[6], lstCookie[7]))
if sCSVFile: oFile.close()
return iDecrypted
if __name__ == '__main__':
oArgs = parseArgs()
lstGUIDs, lstLogins, lstCookies, lstMasterkeys, lstSystemMasterkeys = [], [], [], [], []
bBrowserBMEKey = bMasterkey = oMKP = oABESystemBlob = oABEUserBlob = bBrowserABEKey = bABEMasterkey = None
## List required GUID from Local State
oStateBlob, oABESystemBlob = parseLocalState(oArgs.statefile)
print('[+] Browser State File encrypted with Masterkey GUID: ' + oStateBlob.mkguid)
lstGUIDs.append(oStateBlob.mkguid)
if oABESystemBlob: print(' And also the ABE-Key requires the SYSTEM Masterkey with GUID: ' + oABESystemBlob.mkguid)
## Get Logins, if any
if oArgs.loginfile:
lstLogins, lstGUIDs = parseLoginFile(oArgs.loginfile, lstGUIDs)
print('[!] Found {} credential(s).'.format(str(len(lstLogins))))
## Get Cookies, if any
if oArgs.cookies:
lstCookies, lstGUIDs = parseCookieFile(oArgs.cookies, lstGUIDs)
print('[!] Found {} cookie(s).'.format(str(len(lstCookies))))
## Decrypting ABE Blob
if oArgs.system and oArgs.security and oArgs.systemmasterkey and oABESystemBlob:
print('[+] Found SYSTEM & SECURITY hives, trying first-stage ABE Key decrypting using SYSTEM keys')
oReg = registry.Regedit()
oSecrets = oReg.get_lsa_secrets(oArgs.security, oArgs.system)
bDPAPI_SYSTEM = oSecrets.get('DPAPI_SYSTEM')['CurrVal']
oMKP1 = masterkey.MasterKeyPool()
oMKP1.loadDirectory(oArgs.systemmasterkey)
oMKP1.addSystemCredential(bDPAPI_SYSTEM)
oMKP1.try_credential_hash(None, None)
for lstMKL in oMKP1.keys.values():
for oMK in lstMKL:
bABEUserData = tryDPAPIDecrypt(oABESystemBlob, oMK.get_key())
if bABEUserData:
oABEUserBlob = blob.DPAPIBlob(bABEUserData)
print('[+] Decrypted first-stage of ABE-Key, needed for second-stage is USER Masterkey with GUID: {}'.format(oABEUserBlob.mkguid))
lstGUIDs.append(oABEUserBlob.mkguid)
break
## If no decryption details are provided, feed some results back
if not oArgs.masterkey and not oArgs.masterkeylist and not oArgs.mkfile:
if(len(lstGUIDs) > 1):
lstGUIDs.sort()
print('[!] Required for full decryption are {} different Masterkeys, their GUIDs:'.format(str(len(lstGUIDs))) )
for sGUID in lstGUIDs: print(' ' + sGUID)
print('[!] Go and find these files and accompanying decryption details')
exit(0)
print('\n ----- Getting Browser (& ABE) Master Encryption Key -----')
## Option 1 for getting BME Key: the 64byte DPAPI masterkey is provided (either directly or via a list)
if oArgs.masterkey:
print('[!] Trying direct masterkey')
bMasterkey = bytes.fromhex(oArgs.masterkey)
elif oArgs.masterkeylist:
print('[!] Trying list of masterkeys')
for sMasterkey in open(oArgs.masterkeylist,'r').read().splitlines():
if len(sMasterkey.strip()) == 128 or len(sMasterkey.strip()) == 40: lstMasterkeys.append(bytes.fromhex(sMasterkey.strip()))
for bMK in lstMasterkeys:
bBrowserBMEKey = tryDPAPIDecrypt(oStateBlob, bMK)
if oABEUserBlob: bBrowserABEKey = tryDPAPIDecrypt(oABEUserBlob, bMK)
## All other options require one or more MK files, using MK Pool
if oArgs.mkfile:
oMKP = masterkey.MasterKeyPool()
if os.path.isfile(oArgs.mkfile): oMKP.addMasterKey(open(oArgs.mkfile,'rb').read())
else:
oMKP.loadDirectory(oArgs.mkfile)
if oArgs.verbose: print('[!] Imported {} keys'.format(str(len(list(oMKP.keys)))))
## Option 2 for getting BME Key: the PVK domain key to decrypt the MK key
if oMKP and oArgs.pvk:
print('[!] Try MK decryption with the PVK domain key')
if oMKP.try_domain(oArgs.pvk) > 0:
for bMKGUID in list(oMKP.keys):
oMK = oMKP.getMasterKeys(bMKGUID)[0]
if oMK.decrypted:
if not oMK.get_key() in lstMasterkeys: lstMasterkeys.append(oMK.get_key())
if bMKGUID.decode(errors='ignore') == oStateBlob.mkguid:
bMasterkey = oMK.get_key()
print('[+] Success, user masterkey decrypted: ' + bMasterkey.hex())
## Option 3 for getting BME Key: User SID + password (hash)
if oArgs.mkfile and oArgs.sid and (oArgs.password or oArgs.pwdhash):
print('[!] Try MK decryption with user details, might take some time')
if oArgs.password: oMKP.try_credential(oArgs.sid, oArgs.password)
else: oMKP.try_credential_hash(oArgs.sid, oArgs.pwdhash)
for bMKGUID in list(oMKP.keys):
oMK = oMKP.getMasterKeys(bMKGUID)[0]
if oMK.decrypted:
if not oMK.get_key() in lstMasterkeys: lstMasterkeys.append(oMK.get_key())
if oABEUserBlob and bMKGUID.decode(errors='ignore') == oABEUserBlob.mkguid:
bABEMasterkey = oMK.get_key()
print('[+] Success, ABE masterkey decrypted: {}'.format(bABEMasterkey.hex()))
if bMKGUID.decode(errors='ignore') == oStateBlob.mkguid:
bMasterkey = oMK.get_key()
print('[+] Success, Browser masterkey decrypted: {}'.format(bMasterkey.hex()))
if not bBrowserABEKey:
bBrowserABEKey = tryDPAPIDecrypt(oABEUserBlob, bABEMasterkey)
if bABEMasterkey not in lstMasterkeys: lstMasterkeys.append(bABEMasterkey)
if bBrowserABEKey:
bBrowserABEKey = bBrowserABEKey[-32:]
print(f'\n[+] Got ABE Master Encryption Key: {bBrowserABEKey.hex()}')
if not bBrowserBMEKey:
bBrowserBMEKey = tryDPAPIDecrypt(oStateBlob, bMasterkey)
if bMasterkey not in lstMasterkeys: lstMasterkeys.append(bMasterkey)
if bBrowserBMEKey: print(f'[+] Got Browser Master Encryption Key: {bBrowserBMEKey.hex()}\n')
else:
print('[-] Too bad, no dice, not enough or wrong information')
exit(0)
if oArgs.loginfile or oArgs.cookies: print('\n ----- Decrypting logins/cookies -----')
## Decrypting logins
if bBrowserBMEKey and lstLogins:
iDecrypted = decryptLogins(lstLogins, bBrowserBMEKey, lstMasterkeys, oArgs.export, oArgs.verbose)
print(f'Decrypted {iDecrypted} / {len(lstLogins)} credentials')
## Decrypting cookies
if bBrowserBMEKey and lstCookies:
if bBrowserABEKey: iDecrypted = decryptCookies(lstCookies, bBrowserABEKey, lstMasterkeys, oArgs.export, oArgs.verbose)
else: iDecrypted = decryptCookies(lstCookies, bBrowserBMEKey, lstMasterkeys, oArgs.export, oArgs.verbose)
print(f'Decrypted {iDecrypted} / {len(lstCookies)} cookies')
if not oArgs.verbose and bBrowserBMEKey: print('[!] To print the results to terminal, rerun with "-v"')