def __init__(self):
options = {
'command': '-m',
'action': 'store_true',
'dest': 'memory_dump',
'help': 'retrieve browsers passwords from memory'
}
ModuleInfo.__init__(self, 'memory_dump', 'memory', options)
def __init__(self):
ModuleInfo.__init__(self, 'robomongo', 'databases')
self.paths = [{
'directory': u'.config/robomongo',
'filename': u'robomongo.json',
}, {
'directory': u'.3T/robo-3t/1.1.1',
'filename': u'robo3t.json',
}]
def __init__(self):
ModuleInfo.__init__(self, 'hashdump', 'windows', system_module=True)
def __init__(self):
ModuleInfo.__init__(self, 'unattended', 'sysadmin', system_module=True)
def __init__(self):
ModuleInfo.__init__(self, 'filezilla', 'sysadmin')
def __init__(self):
ModuleInfo.__init__(self, name='postgresql', category='databases')
def __init__(self):
self.path = u'{APPDATA}\\Thunderbird'
ModuleInfo.__init__(self, 'Thunderbird', 'mails')
def __init__(self):
ModuleInfo.__init__(self, 'galconfusion', 'games', registry_used=True)
def __init__(self):
ModuleInfo.__init__(self, 'pidgin', 'chats')
def __init__(self):
ModuleInfo.__init__(self, 'turba', 'games', registry_used=True)
def __init__(self):
ModuleInfo.__init__(self, 'mavenrepositories', 'maven')
# Interesting XML nodes in Maven repository configuration
self.nodes_to_extract = ["id", "username", "password", "privateKey", "passphrase"]
self.settings_namespace = "{http://maven.apache.org/SETTINGS/1.0.0}"
def __init__(self):
ModuleInfo.__init__(self, 'skype', 'chats', winapi_used=True)
self.pwd_found = []
def __init__(self):
ModuleInfo.__init__(self, 'wsl', 'sysadmin')
def __init__(self):
ModuleInfo.__init__(self, 'cyberduck', 'sysadmin', winapi_used=True)
def __init__(self):
ModuleInfo.__init__(self, 'gitforwindows', 'git')
def __init__(self, browser_name, paths):
self.paths = paths if isinstance(paths, list) else [paths]
self.database_query = 'SELECT action_url, username_value, password_value FROM logins'
ModuleInfo.__init__(self, browser_name, 'browsers', winapi_used=True)
def __init__(self):
ModuleInfo.__init__(self, 'apachedirectorystudio', 'sysadmin')
# Interesting XML attributes in ADS connection configuration
self.attr_to_extract = [
"host", "port", "bindPrincipal", "bindPassword", "authMethod"
]
def __init__(self):
self.pwd_found = []
ModuleInfo.__init__(self, 'psi-im', 'chats')
def __init__(self):
ModuleInfo.__init__(self, 'kalypsomedia', 'games')
def __init__(self):
ModuleInfo.__init__(self, 'coreftp', 'sysadmin')
self._secret = "hdfzpysvpzimorhk"
def __init__(self):
ModuleInfo.__init__(self, 'composer', 'php')
def __init__(self):
ModuleInfo.__init__(self,
'autologon',
'windows',
registry_used=True,
system_module=True)
def __init__(self):
ModuleInfo.__init__(self, 'vaultfiles', 'windows', dpapi_used=True)
def __init__(self):
ModuleInfo.__init__(self, 'puttycm', 'sysadmin', registry_used=True)
def __init__(self):
ModuleInfo.__init__(self,
'vault',
'windows',
only_from_current_user=True)
def __init__(self):
ModuleInfo.__init__(self, 'mscache', 'windows', system_module=True)
def __init__(self):
ModuleInfo.__init__(self, 'wifi', 'wifi')
def __init__(self):
self.hex_key = [ 35, 231, 64, 111, 100, 72, 95, 65, 68, 51, 52, 70, 67, 51, 65, 95, 54, 55, 50, 48, 95, 49, 49,
68, 54, 95, 65, 48, 53, 50, 95, 48, 48, 48, 52, 55, 54, 65, 48, 70, 66, 53, 66, 65, 70, 88, 95, 76, 79, 71,
73, 49, 76, 115, 107, 100, 85, 108, 107, 106, 102, 100, 109, 32, 50, 102, 115, 100, 102, 102, 32, 102, 119,
115, 38, 78, 68, 76, 76, 95, 72, 95, 95, 0 ]
ModuleInfo.__init__(self, name='EyeCon', category='multimedia')
def __init__(self):
self.database_query = 'SELECT action_url, username_value, password_value FROM wow_logins'
ModuleInfo.__init__(self, 'uc browser', 'browsers', winapi_used=True)
def __init__(self):
ModuleInfo.__init__(self, 'sqldeveloper', 'databases')
self._salt = self.get_salt()
self._passphrase = None
self._iteration = 42
