benlarsendk / ps03 Goto Github PK

To not have to drop any files on victimside. 👍

The invoker in WiPS invokes multiple (on per wlan profile + one for profile recon) cmdprompts, and executes each in order. Should be done in either 1 cmdprompt or by threading.

There should be a checkup for missing WLAN, so that WiPS stops if a WLAN isn't present.

Stacktrace: http://pastebin.com/jGZsJXmM

There should be a: "Receiving data from 208.xx.xx.xxx.xx" or something like that.

Could be awesome if PS03 could get passwords from IE too.

There's nothing that checks that firefox is installed. Will probably crash if running on a machine without firefox.

{"version":1,"accountData":{"kA":"15681415227a6b72de9461fcbdd09129678401ee2e0d46a01fee34942c73b98f","kB":"1f7671d3da253f26fd0da40ad619449733d54b1b31893ebe8f36e46dac1c4bc5"}} is trated as a password. I belive this error lies within the firefox module. Only happens once. Need some checking.

It stays on 0.

The reportgenerator generates impossible percentages for usage of passwords and usernames.

ChromeDecryptor assumes the victim has Chrome installed, and the file is present. Should be a checkup and conditional cancel if it isn't

When a victim connects to host, a new thread should spawn that reads from that connection. This allows multiple clients to send data to the server at once.

Server should be able to handle startuo args, eg
PS03 -v -l passwords.txt
Which will show the output and save to a file,

If a connection isn't made to the server, the victim side crashes.

Some SQLite Interlooper DLL Error

PS03 should support keys stored by firefox too. Seems a bit more dificult than chrome, but not impossible.

So far the only "report" generated is .txt-file with all used passwords and how much they are used. Could be awesome to generate some kind of HTML-report.