{"repo":"vzhd1701/evertoken","free":true,"listed":false,"github":"https://github.com/vzhd1701/evertoken","clone":"git clone https://github.com/vzhd1701/evertoken.git","description":"Extract authentication token from Evernote and exb database","language":"Go","stars":13,"topics":["evernote","token","reverse-engineering","decryption","authentication"],"license":"MIT","category":"auth-billing-email","readme_excerpt":"evertoken Extract authentication token from Evernote installation and exb database. Installation Download the latest release for your OS. Usage Example output How it works Evernote app uses a few authentication tokens to identify the user when the app communicates with the Evernote server: 1. Token (or monolith token, format S=s401:U=fffffff:E=fffffffffff:...) - main auth token for all communications with Evernote server. Issued for 1 hour. 1. Access Token (JWT) - new auth token for Evernote's new API. Issued for 1 hour. 1. Refresh Token (JWT) - main auth token in modern Evernote app. Issued for 1 year after you log in to you account using desktop app and then refreshed each time it's used. The main purpose of this token is to generate access tokens. All tokens are stored encrypted in a special file for each user. evertoken allows to decrypt & extract it from the Evernote app. Evernote used different forms of storage & encryption of the token throughout its history. Here is a brief description of the differences between the versions: Evernote Legacy (v6.\\ \\ ) [Windows] The token is stored inside the SQLite database file with .exb extension located in C:\\Users\\ \\Evernote\\Databases\\user name.exb . The token is encrypted using AES256 CBC encryption. The key is derived using the system drive's Volume Serial number. So the database can be decrypted only with the knowledge of Volume Serial from the machine it was created on. It can be brute-forced since volume serial is just a 32bi","default_branch":null,"files":null,"tree":[],"storefront":"/r/vzhd1701","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/vzhd1701/evertoken/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}