Add NullSec-QuickCreds multi-phase credential harvester

[bad-antics]

NullSec-QuickCreds

A comprehensive multi-phase credential harvester for the Bash Bunny using HID+STORAGE attack mode.

Attack Phases

1. WiFi Credentials - Extracts all saved WiFi profiles and plaintext passwords via netsh wlan
2. System Info - Hostname, OS version, domain, architecture
3. Clipboard - Captures current clipboard contents
4. Recent Documents - Lists recently accessed files from Recent folder
5. Browser Data Paths - Identifies Chrome, Firefox, Edge data directories
6. Environment Secrets - Extracts sensitive environment variables (API keys, tokens, secrets)
7. Cached Credentials - Dumps Windows Credential Manager entries via cmdkey
8. Network Connections - Active TCP/UDP connections and listening ports

Features

• LED Status Indicators - Visual feedback for each attack phase
• HID+STORAGE Mode - Types commands via keyboard, saves loot to USB
• Organized Output - Timestamped sections with clear headers
• Hidden Execution - Minimized PowerShell window
• Fast Execution - Completes all 8 phases in ~15 seconds

Output

Loot saved to: /loot/quickcreds/HOSTNAME_TIMESTAMP.txt

Tested on: Windows 10/11
Attack Mode: HID + STORAGE