python3 - <<'EOF'
import sqlite3
from Crypto.Cipher import AES
from Crypto.Protocol.KDF import PBKDF2

def decrypt_chrome_cookie(encrypted_value, key):
    if not encrypted_value:
        return ''
    if encrypted_value[:3] in (b'v10', b'v11'):
        encrypted_value = encrypted_value[3:]
        iv = b' ' * 16
        cipher = AES.new(key, AES.MODE_CBC, IV=iv)
        decrypted = cipher.decrypt(encrypted_value)
        pad_len = decrypted[-1]
        return decrypted[:-pad_len].decode('utf-8', errors='replace')
    return encrypted_value.decode('utf-8', errors='replace')

key = PBKDF2('peanuts', b'saltysalt', dkLen=16, count=1)

conn = sqlite3.connect('/home/crogers2287/.social-poster-profile-ghc/Default/Cookies')
cur = conn.cursor()
cur.execute("SELECT host_key, name, value, encrypted_value FROM cookies WHERE host_key LIKE '%.x.com' OR host_key LIKE '%.twitter.com'")
rows = cur.fetchall()

for host, name, value, enc_value in rows:
    if enc_value:
        try:
            dec = decrypt_chrome_cookie(enc_value, key)
            print(f"  [{host}] {name}: {dec[:60]}")
        except Exception as e:
            print(f"  [{host}] {name}: ERROR {e}")
    elif value:
        print(f"  [{host}] {name}: {value[:60]}")

conn.close()
EOF


[.twitter.com] guest_id: 1K�fq4�✿ߧ<�nm�E������01-Bc�v1%3A177086345016379182
  [.twitter.com] guest_id_ads: 1K�fq4�✿ߧ<�nm�E������01-Bc�v1%3A177086345016379182
  [.twitter.com] guest_id_marketing: 1K�fq4�✿ߧ<�nm�E������01-Bc�v1%3A177086345016379182
  [.twitter.com] personalization_id: 1K�fq4�✿ߧ<�nm�E������01-Bc�"v1_K+mhoSbgnGuaRPziLHyvBw=="
  [.x.com] guest_id: �y&Tu��#yZ�MjePc=�Z���l��d}ޤv1%3A177134549385137462
  [.x.com] att: �y&Tu��#yZ�MjePc=�Z���l��d}ޤ1-ShjA24pkhnRaXuhMRV3ZMXWzCY1K
  [.x.com] gt: �y&Tu��#yZ�MjePc=�Z���l��d}ޤ2023911906885378068
  [.x.com] twid: �y&Tu��#yZ�MjePc=�Z���l��d}ޤu%3D2020681672942092288
  [.x.com] __cf_bm: �y&Tu��#yZ�MjePc=�Z���l��d}ޤPI8zHfi2sr2auzCuwNFqTX5bemFlzJ
  [.x.com] __cuid: �y&Tu��#yZ�MjePc=�Z���l��d}ޤ050be0287edb4c098f397229236795
  [.x.com] guest_id_ads: �y&Tu��#yZ�MjePc=�Z���l��d}ޤv1%3A177134549385137462
  [.x.com] guest_id_marketing: �y&Tu��#yZ�MjePc=�Z���l��d}ޤv1%3A177134549385137462
  [.x.com] personalization_id: �y&Tu��#yZ�MjePc=�Z���l��d}ޤ"v1_coxkVHlrIeKVRm8g6KCeeQ=="


The decryption is working but the results have garbage characters at the start. The decryption key "peanuts" might not be the right one, or the IV is wrong. The decryption has garbled data prefix, but some values are visible after it. Let me look at the `twid` cookie - it shows `u%3D2020681672942092288` which is a URL-encoded format (`u=2020681672942092288`). That looks like an actual user ID!

But I need `auth_token` and `ct0` for authentication. I don't see `auth_token` in the cookies. The profile only has guest cookies + `twid`, `att`, `gt`, `__cf_bm`, `__cuid`.