Skip to content
This repository has been archived by the owner on Dec 6, 2023. It is now read-only.

Added functionality to retrieve ssoauthookie from Microsoft Teams local db #647

Merged
merged 2 commits into from Oct 18, 2022

Conversation

R-Secure
Copy link
Contributor

@R-Secure R-Secure commented Oct 11, 2022

This module makes it possible to extract the ssoauthcookie from the local Microsoft Teams database.

image

@R-Secure R-Secure changed the title Added functionality to retrieve the Microsoft Teams Cookies database … Added functionality to retrieve ssoauthookie from Microsoft Teams local db Oct 11, 2022
@mpgn
Copy link
Contributor

mpgn commented Oct 16, 2022

Hello @R-Secure do you have a scenario to exploit the token ? like using the token to connect to teams or find /me info ?

@mpgn mpgn merged commit 74bbeee into byt3bl33d3r:master Oct 18, 2022
@cmprmsd
Copy link

cmprmsd commented Dec 15, 2022

Nice module. I wondered if this is still possible in any case. In my case the cookies seem to be encrypted now (maybe DPAPI stuff). At least I was not able to retrieve the SSOAUTHCOOKIE and skypetoken_asm values.

@R-Secure
Copy link
Contributor Author

@cmprmsd Sorry for my delayed response. Let me check after work, and I'll get back to you!

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants