cookienapper

Python tool for kidnapping Chrome cookies from a MacOS target

Requirements

• Python3
• SOCKS proxy to MacOS target (might I interest you in gTunnel?)
• wscat installed on your host (npm install -g wscat)
• EditThisCookie extension in either Chrome or Firefox

Usage

1. Kill all running Chrome sessions on the MacOS host and then restore them with the Chrome debug port open (as seen in this post)
2. Edit cookienapper.py DEBUG_PORT variable to use the port you specified in previous step
3. proxychains4 python3 cookienapper.py
4. Copy the results from cookies.json and paste into the Import feature of EditThisCookie extension
5. ???
6. Profit (use cookies)

References

• https://posts.specterops.io/hands-in-the-cookie-jar-dumping-cookies-with-chromiums-remote-debugger-port-34c4f468844e