WebView2-Cookie-Stealer - Attacking With WebView2 Applications

Please read this blog post to get more information.

This code is a modified version of Microsoft's WebView2 Code. The current code can be cleaned up and made much better.

Launch Example

Usage Example

Tested on Windows 10 & 11.

When the binary is executed https://office.com/login is loaded up. A JavaScript keylogger is injected into every page and keystrokes are sent to http://127.0.0.1:8080. Furthermore, upon the user successfully authenticating the cookies for login.microsoftonline.com are base64-encoded …

applications cookie stealer webview2 windows windows 10