No Passwords in file.

[wywy1234]

Payload Title

[Browser-Passwords-Dropbox-Exfiltration]

Payload URL

https://github.com/hak5/usbrubberducky-payloads/blob/master/payloads/library/credentials/Browser-Passwords-Dropbox-Exfiltration/Version%2001/Browser-Passwords-Dropbox-Exfiltration.ps1

Payload Setup

Ive completed all of the steps in the README and have successfully received a file with a payload, but the payload has no passwords.

Problem Description

Payload has no passwords attached or listed.

Troubleshooting steps

I have attempted to change the code myself but I end up doing more harm that good. ChatGPT sucks for these lol.

Suspected Cause

I'm assuming its a change in decryption methods or a slight detail missed in the base code. I was really just hoping someone had a fix maybe?

Screenshots or additional information

No response

Checklist ✅ - READ CAREFULLY

• I checked and didn't find a similar issue already reported
• I am using PayloadStudio to encode this payload
• I made sure to redact any private information in the details shared above
• I have read and followed the documentation provided by the original payload author and configured the payload (if required)
• I have confirmed I am deploying this payload with the correct device intended by the original author (Original USB Rubber Ducky vs New USB Rubber Ducky)
• I have confirmed I am deploying this payload on the correct target host intended by the original author (Windows, Mac, Linux, etc)
• I have confirmed the payload is compiled in the correct keyboard language for the target host I'm trying to deploy it on (US, DE, etc)
• I have actually read the above checkboxes before checking them, including this one, which I have intentionally left unchecked as confirmation of this statement

Agreement

• I believe this is an issue with the actual payload itself. I acknowledge this form is not a request for help following instructions.
• I have carefully read and filled out every section of this issue form to the best of my ability. I acknowledge by providing insufficient information I cannot receieve adequate assistance.

[dallaswinger]

Carefully re-read the boxes you checked @wywy1234

[dallaswinger]

@DIYSpy any ideas?

[Painite000]

@dallaswinger , @wywy1234 , @DIYSpy

Have you solved the issue? I currently have the same password problem. Moreover, I don't know which software to use to open the 'cookies_exported.sqlite' file." thanks

[Themistoklis24]

Same here. I guess no solution yet...

[bad-antics]

Hey! If you're not seeing passwords in the output, here's what to check:

Common issues:

1. Browser autofill vs saved passwords
Browsers store passwords differently than credential managers. If you're trying to dump browser passwords, you need browser-specific extraction.

2. Windows Credential Manager
The payload might target Windows Credential Manager which stores:

• Web credentials
• Windows credentials
  But NOT browser-saved passwords directly.

3. Execution timing

• Increase DELAY values
• Scripts might be failing silently

4. Output location
Check where the payload saves results:

• Local file? Check %TEMP% or %USERPROFILE%
• Exfil? Check your receiving server

For browser passwords specifically:

Modern browsers encrypt passwords. You need tools like:

• LaZagne (Python)
• Browser-specific extractors
• SharpChrome for Chrome

Test tip:

Add some test credentials to Windows Credential Manager first:

cmdkey /add:TestServer /user:TestUser /pass:TestPassword

Then run the payload and see if it captures those.

What payload are you running and what browser/credential type are you targeting?