- Joined
- Sep 16, 2026
- Messages
- 7
- Reaction score
- 1
A Windows credential stealer written in C++. No .NET dependency. A single standalone executable with built-in features. Features a modern GUI with user-friendly controls.
Peculiarities
Browsers (13 Chromium + Gecko):
Passwords: Includes Chrome App-Bound Encryption (v20) decoded end-to-end (LSASS-DPAPI double decryption, CNG/KSP key handling)
Cookies: Full session material, domain-accurate
Saved Financials: Stored credit card details
Tokens: Account restore tokens
Autofill: Saved form entries and physical addresses
History & Bookmarks: Complete browsing history and saved links
Web Storage: LocalStorage, SessionStorage, and IndexedDB
Firefox Keyring: Native parsing of NSS key3/key4 databases
Discord & Messaging:
Discord: Authentication tokens, MFA status, email, phone number, billing methods, gift codes, and Nitro status
Telegram: Active session files (.tdata)
Tox: Identity profiles and active session dumps
Gaming Infrastructure:
Steam: Session configuration (config.vdf) and login credentials
Minecraft: Active session files
Roblox: Account authentication cookies
System Inventory: Complete enumeration of installed games
Credentials & System Memory:
SSH Keys: Full content of the ~/.ssh directory
Crypto Wallets: Automatic detection and packaging of standard wallet formats
LSASS Memory Dump: Full process memory capture (lsass.dmp) containing active security tokens
Credential Vaults: Windows Credentials (WinCred), third-party password managers, TOTP authenticator secrets, FTP client saved logins, developer credentials, and Outlook profile data
System Environment & Reconnaissance:
Hardware Fingerprint: System UUID, disk serial numbers, CPU, GPU, and total RAM
System State: Active running processes, connected USB devices, and network topology
IP & Geo Posture: External IP, country, region, timezone, reverse DNS, and proxy/VPN/mobile detection
On-Demand Media: Webcam snapshots, multi-monitor display captures, and secondary RAM/history passes
Check out other posts on my profile as well.
Peculiarities
Browsers (13 Chromium + Gecko):
Passwords: Includes Chrome App-Bound Encryption (v20) decoded end-to-end (LSASS-DPAPI double decryption, CNG/KSP key handling)
Cookies: Full session material, domain-accurate
Saved Financials: Stored credit card details
Tokens: Account restore tokens
Autofill: Saved form entries and physical addresses
History & Bookmarks: Complete browsing history and saved links
Web Storage: LocalStorage, SessionStorage, and IndexedDB
Firefox Keyring: Native parsing of NSS key3/key4 databases
Discord & Messaging:
Discord: Authentication tokens, MFA status, email, phone number, billing methods, gift codes, and Nitro status
Telegram: Active session files (.tdata)
Tox: Identity profiles and active session dumps
Gaming Infrastructure:
Steam: Session configuration (config.vdf) and login credentials
Minecraft: Active session files
Roblox: Account authentication cookies
System Inventory: Complete enumeration of installed games
Credentials & System Memory:
SSH Keys: Full content of the ~/.ssh directory
Crypto Wallets: Automatic detection and packaging of standard wallet formats
LSASS Memory Dump: Full process memory capture (lsass.dmp) containing active security tokens
Credential Vaults: Windows Credentials (WinCred), third-party password managers, TOTP authenticator secrets, FTP client saved logins, developer credentials, and Outlook profile data
System Environment & Reconnaissance:
Hardware Fingerprint: System UUID, disk serial numbers, CPU, GPU, and total RAM
System State: Active running processes, connected USB devices, and network topology
IP & Geo Posture: External IP, country, region, timezone, reverse DNS, and proxy/VPN/mobile detection
On-Demand Media: Webcam snapshots, multi-monitor display captures, and secondary RAM/history passes
Check out other posts on my profile as well.
