CookieCleaner — Frankk Darko

"Infostealer" malware steals your browser's cookies and allows an attacker to log in to your accounts without a password and without triggering 2FA, since the session is already authenticated.

A stolen cookie is only useful as long as the session is valid. CookieCleaner regularly clears cookies and session tokens from the sensitive sites of your choice: this reduces the window of opportunity for exploiting a stolen cookie from several weeks to just a few hours.

Features:

• Automatic cleaning every 30 minutes to 24 hours, or when the browser starts
• Two modes: list of selected sites, or “clean everything except my whitelist”
• One-click presets: Discord, Google, Steam, PayPal, Microsoft, social media…
• Clears localStorage / IndexedDB — where tokens like Discord’s are stored
• Direct links to “connected devices” pages to revoke sessions on the server side
• Breach checks: email via Have I Been Pwned, password via the k-anonymity API
• Cleanup log, interface in 5 languages (FR, EN, ES, DE, IT)

Let’s be honest: CookieCleaner reduces the risk; it doesn’t eliminate it. If malware is active on your device, it can steal your cookies again. This tool complements a secure system, antivirus software, and 2FA—it does not replace them.

Privacy: No data leaves your device. No servers, no accounts, no statistics. Full source code: https://github.com/FrankkDarko/CookieCleaner