AccXtract is a Proof of Concept tool designed to show just how easily all of your accounts can be compromised. Run from a few USB, AccXtract can steal access to every account you are currently logged in to and decrypt all of your saved passwords, in a fraction of a second! It can then, with a few more clicks, add all of that data to a new computer. It is incredibly, and terrifyingly, easy to use. Try it out!
Why did I write it?
AccXtract (pronounced "ack-ex-tract") was designed as an attempt to educate people as to how
unbelievably easy it is to steal access to accounts and passwords given only a few seconds' access to a computer. Most computer users are under the illusion that their browsers and programs automatically secure all of their data, preventing malicious local attacks and keeping their personal info safe. AccXtract is here to prove that this is the exact OPPOSITE of the truth. In fact, some of the most important, and yet most most overlooked, data to protect, your cookies, are left COMPLETELY UNENCRYPTED. Other things generally considered (and for the most part incorrectly so) to be more important like passwords are almost always stored with only the most basic and easily reversible type of encryption. AccXtract not only streamlines the process of stealing and decrypting this data, it also allows you to easily add this data back to your own system, further proving that even the most novice of computer users can easily get access to everything.
What exactly does AccXtract do?
In short, AccXtract allows you to, with just a double-click, steal access to every account logged in in Google Chrome or Firefox (more programs coming soon) and every password that either has saved. It then allows you to bring this information back to your computer and with a single click insert it into your respective browser, to instantly give you access to all of the target's accounts and passwords.
Stay up to date!
Want to see something else added to the list? Email me: Garrett.DavidsonAPC@gmail.com
Extended version here
Getting login info (standard user):
Getting login info (Administrator):
Using acquired login info: