Author: oXis
Version: Version 2.0
Credit: illwill, sekirkity, EmpireProject
Based on BrowserCreds from illwill, this version grabs Facebook session cookies from Chrome/Firefox on Windows, decrypt them and put them in /root/udisk/loot/FacebookSession
Only works for Chrome/Firefox on Windows. Tested on two different Windows 10 machines.
Only payload.txt, server.py and p are required.
Server.py will load a local HTTP server, the script is downloaded from that server and then uploads the cookies to it.
| LED | Status |
|---|---|
| Blue (blinking) | Payload init |
| White (blinking) | Setup RNDIS_ETHERNET |
| Green (blinking) | Done |