ChromeDump Module

[robertbhalla71]

Empire Version

2.0

OS Information (Linux flavor, Python version)

Debian
python 2.7

Expected behavior and description of the error, including any actions taken immediately prior to the error. The more detail the better.

While taking the chromedump, one column is removed because it doesn't fit the display. while writing it out in a file, it doesn't work

Screenshot of error, embedded text output, or Pastebin link to the error

Any additional information

[ThePirateWhoSmellsOfSunflowers]

Have you tried this PR #734 ?

[xorrior]

@robertbhalla71 when writing out to a file, what specifically doesn't work? Are there errors? Is the file not created?

[xorrior]

Can you confirm that you can write to the path specified? Can you try C:\windows\tasks ?

[robertbhalla71]

I found the problem was not with the OutFile. Even when i got to create a file with chromedump, the PWD column is empty as the module is not able to extract passwords out of it. Has anyone got any results with this module?

Also the module Invoke-FoxDump doesn't show anything even when you have admin high-integrity. any suggestions?

[robertbhalla71]

@xorrior There was a momentary error. tried the next day and the file got created. Thanks for help @ThePirateWhoSmellsOfSunflowers

[ThePirateWhoSmellsOfSunflowers]

@OneDollarr The data files are locked while Chrome is running, you need to kill Chrome before using this module

[ThePirateWhoSmellsOfSunflowers]

You don't need SYSTEM because passwords are encrypted in the context of the current user. Try without SYSTEM

[xorrior]

The save path is referring to a directory on the comprised host, not locally..