+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [Python] Plug and Steal, Chrome Password Stealer [Python 3.5] (/showthread.php?tid=5548841)
* - 05317832892 - Feb 14, 2017
(Feb 14, 2017 06:05 AM)FrogSquad4 Wrote: No, I meat IS there a mac version. I knew macs don't have windows32crypt.
Not that I know of.
* - Vozuth - Feb 18, 2017
Am i dump or what? Can i compile it to exe but where those dumps gonna go?
* - 05317832892 - Feb 18, 2017
(Feb 18, 2017 04:15 AM)Vozuth Wrote: Am i dump or what? Can i compile it to exe but where those dumps gonna go?
The dump does in the same folder as the exe. So if the exe it's run on your desktop the dumb goes on your desktop. If it's run on a USB the dump goes on the USB.
* - /usr - Feb 18, 2017
(Feb 12, 2017 05:33 AM)★Cam★ Wrote: Basically the passwords can only be decrypted on the machine they are encrypted on because the algorithm is slightly different on every windows computer, thus we have to decrypt the passwords on the machine that they were encrypted on. Stolen encrypted passwords are useless unless you have access to the machine they were encrypted on. This script steals and decrypts them all in one go.
Hi!
Thanks for sharing!
I'm learning python and this is really useful.
One question related on what I qouted above: Does this referred to any kind of encryption? I mean, what if you decrypt the pwd and then, with another string of program, you encrypt in a different way on your usb drive? Does this still need the machine on which they were encrypted?
Other solution could be to create a folder on the usb with property to make it invisible to read: is this possible?
Thank you!
* - Vozuth - Feb 18, 2017
Well its working well, but when i upload to slave via rat and execute it there im getting Failed to execute script :/
* - 05317832892 - Feb 18, 2017
(Feb 18, 2017 06:22 AM)gabr Wrote: Hi!
Thanks for sharing!
I'm learning python and this is really useful.
One question related on what I qouted above: Does this referred to any kind of encryption? I mean, what if you decrypt the pwd and then, with another string of program, you encrypt in a different way on your usb drive? Does this still need the machine on which they were encrypted?
Other solution could be to create a folder on the usb with property to make it invisible to read: is this possible?
Thank you!
Didn't think about marking the dump as hidden, seems kind of pointless though. As for your other question, don't quite understand what you mean, the win32crypt is triple DES, the way it utilises DES makes it machine dependent, DES can be used non-machine dependent.
(Feb 18, 2017 08:18 AM)Vozuth Wrote: Well its working well, but when i upload to slave via rat and execute it there im getting Failed to execute script :/
"Script", How are you uploading it to a "slave". Make sure it's compiled.
Also when you execute it on the bot, it's probably gonna leave the dump in their temp directory.
* - Vozuth - Feb 19, 2017
I'm uploading to path and execute it, but as i said before im getting failed to execute. Even i tried on my own pc via rat and same thing. But if do it myself its working fine. It's compiled. It doesnt leave dump just after script failed to execute it leaving tempdatabase file which is empty.
* - 05317832892 - Feb 19, 2017
(Feb 19, 2017 03:54 AM)Vozuth Wrote: I'm uploading to path and execute it, but as i said before im getting failed to execute. Even i tried on my own pc via rat and same thing. But if do it myself its working fine. It's compiled. It doesnt leave dump just after script failed to execute it leaving tempdatabase file which is empty.
Ahh this probably means the user doesn't have chrome installed/has no passwords saved.
* - Vozuth - Feb 19, 2017
I tried it on mine pc and i do have some passwords and when i start it leaves me with the dump of passwords right, but when i execute it via rat, it just leave me with the error and empty tempdatabase file
* - 05317832892 - Feb 19, 2017
(Feb 19, 2017 05:04 AM)Vozuth Wrote: I tried it on mine pc and i do have some passwords and when i start it leaves me with the dump of passwords right, but when i execute it via rat, it just leave me with the error and empty tempdatabase file
That's why it works on your PC but not the other, because the other PC has no passwords to recover.
* - Wawawest - Feb 19, 2017
Nice bro
I digg your work
* - 05317832892 - Feb 20, 2017
(Feb 19, 2017 04:45 PM)Wawawest Wrote: Nice bro
I digg your work
Thanks! 🤝
* - Folks - Feb 21, 2017
So I am working around with the code, and I can't seem to figure out why I can't also delete the dump.txt after it is closed out of? I have it so it creates the file dump, emails the text doc to someone and then tries to delete the doc but it says its still in use.
* - 05317832892 - Feb 21, 2017
(Feb 21, 2017 12:38 AM)Folks Wrote: So I am working around with the code, and I can't seem to figure out why I can't also delete the dump.txt after it is closed out of? I have it so it creates the file dump, emails the text doc to someone and then tries to delete the doc but it says its still in use.
How are you emailing it?
Share the code and we can help you with it.
I guess your probably not closing it properly.
* - Folks - Feb 21, 2017
(Feb 21, 2017 01:59 PM)★Cam★ Wrote: How are you emailing it?
Share the code and we can help you with it.
I guess your probably not closing it properly.
there may be more elegant ways to be doing the emailing but for now this is what I have. Everything works when adding in correct credentials except for the os.remove("dump.txt").
I also just took out the saving of passwords part for sake of clarity and it still didn't work.
Spoiler (Click to View)
EDIT: So I still don't know why the first doesn't work but even if I have it barebones like create file -> close file -> delete file, It still doesn't work. The way I am currently getting around it something like this.