+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Grabbing data from chrome with usb (/showthread.php?tid=5959653)
Pages: Pages
1
2
Grabbing data from chrome with usb - gotcha000 - Apr 12, 2019
I work in a call center, and have tons of leads show up on my screen a day. I want to use a flash drive to grab information like names, numbers, emails and addresses from the text boxes they show up in in Chrome. I don’t really know how I could go about this so any help would be appreciated. Obviously I want this to run in the background with no apparent software running. The people here aren’t tech savvy so I really don’t have much concern for it being found out at least for a while.
RE: Grabbing data from chrome with usb - GnosticPlayers - Apr 12, 2019
You'll have to create something that automates the process, such as a python script or something. Or maybe using a Rubber Ducky? Who knows.
Hope this helps
Regards.
RE: Grabbing data from chrome with usb - gotcha000 - Apr 12, 2019
Alright I was assuming that I needed to write a script, just didn’t know how to approach it or how/what to code. What’s rubber ducky?
RE: Grabbing data from chrome with usb - Sitrep - Apr 12, 2019
You want to steal cookies if I understand you?
I think you're looking for something similar to this then. Maybe not the best script out there, but there is more out there to rewrite to your own liking.
https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Payload---Chrome-Password-Stealer
RE: Grabbing data from chrome with usb - Maplie - Apr 12, 2019
Your best bet would to be write your own program, something that takes a screenshot every x amount of seconds for example and that will run from a USB. Won't be an easy task but you could hire a coder.
RE: Grabbing data from chrome with usb - gotcha000 - Apr 12, 2019
Not cookies, they don't get saved as cookies, it just shows up as text on the page.
And I thought about taking screenshots but would prefer it if I could just take the text from the page and save it as a spreadsheet or something similar, would make it much easier. I've used selenium in the past to grab text using element ids, I was thinking I could do something similar but not sure how.
RE: Grabbing data from chrome with usb - Sitrep - Apr 12, 2019
(Apr 12, 2019 07:48 PM)gotcha000 Wrote: Not cookies, they don't get saved as cookies, it just shows up as text on the page.
ah, okay. I misunderstood you then.
Interesting project, let me know if you solve it!
RE: Grabbing data from chrome with usb - t-anonymous - Apr 13, 2019
I don't think we can really help you if we don't have an idea how the data shows up in Chrome. If you've used Selenium before, you could try to check all the elements and write them down so you can write a script later on, what I'd recommend is writing the script and put it on a USB, then just run it manually to see if it works. Unless you wanna risk it with running a script from a Rubber Ducky, you won't really know if it's going to work. So, write your script beforehand and test it out yourself, that's the only thing I could recommend. Pm me if you wanna talk more about this
RE: Grabbing data from chrome with usb - Pawnhub - Apr 13, 2019
(Apr 12, 2019 07:48 PM)gotcha000 Wrote: Not cookies, they don't get saved as cookies, it just shows up as text on the page.
And I thought about taking screenshots but would prefer it if I could just take the text from the page and save it as a spreadsheet or something similar, would make it much easier. I've used selenium in the past to grab text using element ids, I was thinking I could do something similar but not sure how.
Probably the best bet would to code a scraper in C.
just use regex for the phone number and then grab the text in between the element id's.
& use the program from a USB.
EDIT: what os is the system running?
RE: Grabbing data from chrome with usb - gotcha000 - Apr 13, 2019
Some are Windows 7 and some are Windows 10, and I know the element ID names already, I checked Friday. Unfortunately the only way I can test is to log in to my account on the website that they use, which would obviously expose me as I would be logging on with a different IP that I'm sure is logged.
I'll look into coding a scraper with C though, I knew it would have to be some sort of scraper, just didn't know the specifics. The hard part is that the script wouldn't be loading a specific webpage to scrape, it would be looking for dynamic elements on a single webpage.
Ideally I want to load whatever I make onto multiple USBs, then plug them into multiple PCs at the same time. Have them run automatically and in the background undetectable. Big task I know haha
RE: Grabbing data from chrome with usb - gotcha000 - Apr 16, 2019
I asked a buddy of mine how I could go about this and he said I should grab the network requests through chrome. Anyone know how I could do that? Thanks
RE: Grabbing data from chrome with usb - realsunjester - Apr 16, 2019
it would be easier to use the built-in console and use javascript to just send the data somewhere.
![[Image: QWQB7Ng.png]](https://i.imgur.com/QWQB7Ng.png)
RE: Grabbing data from chrome with usb - gotcha000 - Apr 16, 2019
This is a fairly small company, and the single IT guy they have knows basically nothing from what I've seen. They use me for most of their tech support as of right now.
I would rather not have to have the console open and would rather have something running in the background, I checked the network tab on inspect element today and there are definitely single files that come in that contain all the information I'm trying to get. I'm just not sure how to access that with a script or program. I.E every time "certain file" comes in its copied to the flash drive.
RE: Grabbing data from chrome with usb - 77rorvYIGgW7 - Apr 16, 2019
(Apr 16, 2019 01:06 PM)gotcha000 Wrote: This is a fairly small company, and the single IT guy they have knows basically nothing from what I've seen. They use me for most of their tech support as of right now.
I would rather not have to have the console open and would rather have something running in the background, I checked the network tab on inspect element today and there are definitely single files that come in that contain all the information I'm trying to get. I'm just not sure how to access that with a script or program. I.E every time "certain file" comes in its copied to the flash drive.
If your employer has poor IT Security then I'm assuming they have poor OpSec (operation security) as well. You could invest in a spy camera that you can wear on your clothing directly aimed at the screen while you perform your duties. Then later observe the footage to extract the useful data. However there is a major flaw in the method I just mentioned, as well as using any form of spyware at your assigned computer while using your employee login credentials. The flaw is leaving a digital trace of your activity to you specifically. Your employer may be dumb enough to miss it, but law enforcement will be quick to discover it once customer information that was accessed by you becomes compromised and public. Every account that you accessed will match your employee id, calls, metrics and interactions.
Then game over.
Better to use various social engineering methods to compromise the company server room using credentials of other employee(s) to cover your tracks.
RE: Grabbing data from chrome with usb - gotcha000 - Apr 16, 2019
My company uses existing lead lists from various sources. This isn't existing customer data, just a random lead from random lead lists.
Wearing a spy camera and having to go through the footage is way more time consuming than what I'm looking to do, I'm just looking to have the data extracted for me with a script or something similar. If it's more work than that I'm not interested as this was just supposed to be a fun and learning project for me. Logging in with a different employees credentials wouldn't do me very good because the leads are pushed to the computer one at a time, there isn't a way to look up a full lead list or access more than one lead at a time.