History

Sebastian Kinne 85b1bc7aca Cleanup: Sort payloads by category		2017-04-10 13:29:17 +10:00
..
README.md	Cleanup: Sort payloads by category	2017-04-10 13:29:17 +10:00
get_facebook_cookies.ps1	Cleanup: Sort payloads by category	2017-04-10 13:29:17 +10:00
p	Cleanup: Sort payloads by category	2017-04-10 13:29:17 +10:00
payload.txt	Cleanup: Sort payloads by category	2017-04-10 13:29:17 +10:00
server.py	Cleanup: Sort payloads by category	2017-04-10 13:29:17 +10:00

README.md

WindowsCookies for Bash Bunnys

Author: oXis
Version: Version 2.1
Credit: illwill, sekirkity, EmpireProject

Description

Based on BrowserCreds from illwill, this version grabs Facebook session cookies from Chrome/Firefox on Windows, decrypt them and put them in /root/udisk/loot/FacebookSession
Only works for Chrome/Firefox on Windows. Tested on two different Windows 10 machines, now works on Windows 7 (fixed powershell regex)
Only payload.txt, server.py and p are required.
Server.py will load a local HTTP server, the script is downloaded from that server and then uploads the cookies to it.

Payload LED STATUS

LED	Status
Blue (blinking)	Payload init
Yellow (blinking)	Setup RNDIS_ETHERNET
Green (blinking)	Done