Skip to content

Added Gecko browsers paths - #1371

Open
AndreySolod wants to merge 1 commit into
Pennyw0rth:mainfrom
AndreySolod:browsers
Open

Added Gecko browsers paths#1371
AndreySolod wants to merge 1 commit into
Pennyw0rth:mainfrom
AndreySolod:browsers

Conversation

@AndreySolod

Copy link
Copy Markdown

Description

Added Gecko browsers (e.g. Firefox) path to grab with --dpapi options. Test only with Firefox and Thunderbird, other browsers paths was added from https://github.com/SaulBerrenson/BrowserStealer

Type of change

Insert an "x" inside the brackets for relevant items (do not delete options)

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Deprecation of feature or functionality
  • This change requires a documentation update
  • This requires a third party update (such as Impacket, Dploot, lsassy, etc)
  • This PR was created with the assistance of AI (list what type of assistance, tool(s)/model(s) in the description)

Setup guide for the review

For test Thunderbird decryptor you need an Mozilla Thunderbird application. No additional software/GPO changes/Specific registry/etc.

Screenshots (if appropriate):

Screenshots are always nice to have and can give a visual representation of the change.
If appropriate, include before and after screenshot(s) to show which results are to be expected.

Checklist:

Insert an "x" inside the brackets for completed and relevant items (do not delete options)

  • I have ran Ruff against my changes (poetry: poetry run ruff check ., use --fix to automatically fix what it can)
  • I have added or updated the tests/e2e_commands.txt file if necessary (new modules or features are required to be added to the e2e tests)
  • If reliant on changes of third party dependencies, such as Impacket, dploot, lsassy, etc, I have linked the relevant PRs in those projects
  • I have linked relevant sources that describes the added technique (blog posts, documentation, etc)
  • I have performed a self-review of my own code (not an AI review)
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation (PR here: https://github.com/Pennyw0rth/NetExec-Wiki)

@AndreySolod

Copy link
Copy Markdown
Author

I was thinking of adding Chromium browsers by analogy and fixing the dploot error, but it seems this task will be handled within dploot (#1161).
In my opinion, the modifications are quite trivial and don’t require any additional tests.

@NeffIsBack

Copy link
Copy Markdown
Member

Cool idea, thanks for the PR!

@NeffIsBack NeffIsBack added the enhancement New feature or request label Aug 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants