/WindowsCookies

BashBunny payload

Primary LanguagePowerShell

WindowsCookies for Bash Bunnys

Author: oXis
Version: Version 2.0
Credit: illwill, sekirkity, EmpireProject

Description

Based on BrowserCreds from illwill, this version grabs Facebook session cookies from Chrome/Firefox on Windows, decrypt them and put them in /root/udisk/loot/FacebookSession
Only works for Chrome/Firefox on Windows. Tested on two different Windows 10 machines.
Only payload.txt, server.py and p are required.
Server.py will load a local HTTP server, the script is downloaded from that server and then uploads the cookies to it.

Payload LED STATUS

LED Status
Blue (blinking) Payload init
White (blinking) Setup RNDIS_ETHERNET
Green (blinking) Done