Bot Jinkusu Starkiller https://t.me/jinkusureverse (1 Viewer)

invincIbLe? · Dec 20, 2025

================================================================================
JINKUSU STARKILLER
How This Software Works
================================================================================

OVERVIEW
--------
Jinkusu StarKiller is an advanced phishing platform that creates real-time
browser sessions to capture login credentials and session cookies from targets.
Unlike traditional phishing pages (static HTML copies), this tool provides
victims with a REAL browsing experience while secretly recording everything.

HOW IT WORKS - STEP BY STEP
---------------------------

1. ATTACKER SETS TARGET
- Attacker runs: ./start.sh https://accounts.google.com
- The platform starts and generates a phishing link

2. VICTIM CLICKS LINK
- Victim receives link (via email, SMS, social engineering)
- When clicked, a new container is created just for that victim
- Each victim gets their own isolated browser session

3. REAL BROWSER SESSION
- The victim sees a REAL Chrome browser running on the server
- This browser is streamed to their screen
- The browser automatically opens the target login page (e.g., Google)
- Victim interacts with the REAL website, not a fake copy

4. CREDENTIAL CAPTURE (Keylogger)
- Every keystroke the victim types is recorded
- Advanced pattern detection identifies:
* Username/Email (detected by email patterns)
* Password (detected by field order and typing pauses)
* 2FA codes, PINs, security codes
- Credentials are saved to credentials.json

5. COOKIE CAPTURE
- After victim logs in successfully, their session cookies are extracted
- Cookies are decrypted from Chrome's encrypted storage
- Saved in JSON format (compatible with browser extensions)
- These cookies can be imported to hijack the session

6. ADMIN PANEL MONITORING
- Attacker monitors all active sessions in real-time
- Can see: active victims, captured credentials, cookies, keylogs
- Can download all captured data
- Can terminate sessions

TECHNICAL COMPONENTS
--------------------

┌─────────────────────────────────────────────────────────────────────────────┐
│ ARCHITECTURE │
├─────────────────────────────────────────────────────────────────────────────┤
│ │
│ VICTIM'S BROWSER OUR SERVER │
│ ┌─────────────┐ ┌─────────────────────────────┐ │
│ │ │ WebSocket/HTTPS │ (Reverse Proxy) │ │
│ │ Clicks │ ───────────────────► │ - Routes traffic │ │
│ │ Link │ │ - SSL termination │ │
│ │ │ └──────────┬──────────────────┘ │
│ └─────────────┘ │ │
│ ▼ │
│ ┌─────────────────────────────┐ │
│ │ starkiller Container │ │
│ │ - Creates new sessions │ │
│ │ - Manages containers │ │
│ └──────────┬──────────────────┘ │
│ │ │
│ ▼ │
│ ┌─────────────────────────────┐ │
│ │ starkiller Container │ │
│ │ (One per victim) │ │
│ │ │ │
│ │ ┌───────────────────────┐ │ │
│ │ │ Xvfb (Virtual Display)│ │ │
│ │ └───────────────────────┘ │ │
│ │ │ │ │
│ │ ┌─────────▼─────────────┐ │ │
│ │ │ Chrome Browser │ │ │
│ │ │ (Opens target site) │ │ │
│ │ └───────────────────────┘ │ │
│ │ │ │ │
│ │ ┌─────────▼─────────────┐ │ │
│ │ │ Keylogger (Python) │ │ │
│ │ │ - Records keystrokes │ │ │
│ │ │ - Detects credentials │ │ │
│ │ └───────────────────────┘ │ │
│ │ │ │ │
│ │ ┌─────────▼─────────────┐ │ │
│ │ │ Cookie Extractor │ │ │
│ │ │ - Extracts cookies │ │ │
│ │ │ - Decrypts values │ │ │
│ │ └───────────────────────┘ │ │
│ │ │ │ │
│ │ ┌─────────▼─────────────┐ │ │
│ │ │ JSK Server │ │ │
│ │ │ - Streams to victim │ │ │
│ │ └───────────────────────┘ │ │
│ └─────────────────────────────┘ │
│ │
│ ┌─────────────────────────────┐ │
│ ATTACKER'S BROWSER │ Admin Panel (Node.js) │ │
│ ┌─────────────┐ │ - Real-time monitoring │ │
│ │ │ HTTPS │ - View credentials │ │
│ │ Admin │ ◄─────────────────── │ - Download cookies │ │
│ │ Panel │ │ - Manage sessions │ │
│ │ │ └─────────────────────────────┘ │
│ └─────────────┘ │
│ │
└─────────────────────────────────────────────────────────────────────────────┘

KEY FEATURES
------------

1. REAL BROWSER SESSION
- Not a static phishing page
- Victim interacts with actual website
- Bypasses most phishing detection
- Works with 2FA, CAPTCHA, etc.

2. ADVANCED KEYLOGGER
- Captures all keystrokes
- Smart credential detection:
* Email pattern recognition
* Typing pause detection (click-based field switching)
* TAB/ENTER key detection
- Categorizes: username, password, 2FA codes, PINs

3. SESSION COOKIE THEFT
- Extracts cookies after successful login
- Decrypts Chrome's encrypted cookie storage
- JSON format compatible with EditThisCookie extension
- Allows session hijacking without password

4. MULTI-TARGET SUPPORT
- Each victim gets isolated container
- Multiple simultaneous sessions
- Automatic resource management

5. ADMIN PANEL
- Real-time session monitoring
- Credential viewing and download
- Cookie export
- Session termination
- Hacker-themed UI

CAPTURED DATA STRUCTURE
-----------------------

Downloads/{session-id}/
├── credentials.json # Parsed credentials (username, password, 2FA)
├── credentials_summary.txt # Human-readable summary
├── cookies.json # Browser cookies (JSON format)
├── Cookies.txt # Browser cookies (text format)
├── keylogs.txt # Raw keystroke log
├── form_captures.json # Form submission data
└── Default/ # Chrome profile data

EXAMPLE CAPTURED CREDENTIALS
----------------------------

credentials.json:
{
"captured_at": "2025-12-19 16:04:58",
"username": "victim@gmail.com",
"password": "SecretPassword123!",
"extra_tokens": [
{
"type": "2FA_CODE",
"value": "482910",
"captured_at": "2025-12-19 16:05:15"
}
]
}

EXAMPLE CAPTURED COOKIES
------------------------

cookies.json:
[
{
"domain": "accounts.google.com",
"name": "SID",
"value": "g.a000pQh...[session token]...",
"secure": true,
"httpOnly": true
},
{
"domain": ".google.com",
"name": "HSID",
"value": "AeQS...[auth token]...",
"secure": true
}
]

WHY THIS WORKS
--------------

Traditional phishing:

Fake login page → Victim enters credentials → Page looks suspicious
Easy to detect (URL mismatch, certificate warnings, missing elements)
Doesn't capture 2FA codes
Doesn't steal session cookies

Jinkusu StarKiller:

Real website → Victim sees legitimate site → No suspicion
URL is attacker's domain but content is real
Captures everything: credentials, 2FA, session cookies
Victim completes real login → Attacker gets valid session

ATTACK FLOW EXAMPLE
-------------------

1. Attacker: ./start-platform.sh https://accounts.google.com

2. Attacker sends link: https://attacker-domain.com/abc123

3. Victim clicks link → Sees real Google login page

4. Victim types: victim@gmail.com [TAB] MyPassword123 [ENTER]

5. Keylogger captures:
- Username: victim@gmail.com
- Password: MyPassword123

6. Google asks for 2FA → Victim enters: 482910

7. Keylogger captures:
- 2FA Code: 482910

8. Login successful → Cookie extractor captures session cookies

9. Attacker can now:
- Use captured password for other services
- Import cookies to hijack Google session
- Access victim's Gmail, Drive, etc.

LEGAL DISCLAIMER
----------------

This software is intended for:

Authorized penetration testing
Security research
Educational purposes

Unauthorized use against systems you don't own or have explicit
permission to test is ILLEGAL and may result in criminal prosecution.

亲爱的PP · Dec 22, 2025

Contact information, buddy

jinxwoo13 · Dec 29, 2025

where is the tool?

Bot Jinkusu Starkiller https://t.me/jinkusureverse (1 Viewer)

Currently reading: Bot Jinkusu Starkiller https://t.me/jinkusureverse (1 Viewer)

invincIbLe?

亲爱的PP

jinxwoo13

"S'all Good, Man."​

"Perfection Is The Enemy Of Perfectly Adequate."​

"Money Is The Point!"​

"I Travel In Worlds You Can't Even Imagine."​

"Say Nothing, You Understand? Get A Lawyer!"​

“Confidence is good. Facts on your side, better.” ​

“Facts are facts.”​

“Sometimes the good guys win.”​

“I’m not good at building shit, you know? I’m excellent at tearing it down.”​

“Money is not beside the point… Money is the point.”​

“Whoa, whoa. Hold up. What the hell happened to you? I get it, the first rule of Fight Club, right?”​

“A good magician never reveals his secrets.”​

“Got to look successful to be successful.”​

“The lesson is, if you’re gonna be a criminal, do your homework.” ​

“If I had to do it all over again, I would maybe do some things differently. I just thought you should know that.”​

“Some men aren't looking for anything logical. They can't be bought, bullied, reasoned or negotiated with. Some men just want to watch the world burn.”​

"Ernest Hemingway once wrote, "The world is a fine place and worth fighting for." I agree with the second part."​

“There’s no better way to destroy someone’s life than to uncover their secrets.”​

“Hackers are breaking the systems for profit. Before, it was about intellectual curiosity and pursuit of knowledge and thrill, and now hacking is big business.”​

“Hackers often describe what they do as playfully creative problem-solving.”​

“Computer hackers do not need to know each other’s real names, or even live on the same continent, to steal millions in mere hours."​

“While many hackers have the knowledge, skills, and tools to attack computer systems, they generally lack the motivation to cause violence or severe economic or social harm.”​

“Very smart people are often tricked by hackers, by phishing. I don’t exclude myself from that. It’s about being smarter than a hacker. Not about being smart.”​

“At the end of the day, my goal was to be the best hacker.”​

“Humiliation is the favorite currency of the hacker.”​

“The hacker didn’t succeed through sophistication. Rather he poked at obvious places, trying to enter through unlocked doors. Persistence, not wizardry, let him through.”​

"Rules. Without Them We Live With The Animals.”​

“Consider This A Professional Courtesy.”​

"I've Lived My Life My Way, And I'll Die My Way."​

"You stabbed the devil in the back, and forced him back into the life that he had just left."​

"You Want A War, Or Do You Want To Just Give Me A Gun?"​

"Leave one wolf alive and the sheep are never safe."​

"When you play the game of thrones, you win or you die. There is no middle ground."​

"It's not easy to see something that’s never been before: A good world."​

"I believe in second chances. I don't believe in third chances."​

"If you only trust the people you grew up with, you won't make many allies."​

"A man with no motive is a man no one suspects. Always keep your foes confused: If they don't know who you are, what you want—they can't know what you plan to do next."​

"Never forget what you are, the rest of the world will not. Wear it like armor and it can never be used to hurt you."​

"I try to know as many people as I can. You never know which one you'll need."​

"It's hard to put a leash on a dog once you've put a crown on its head."​

“Everything before the word ‘but’ is horseshit.”​

“A lion doesn’t concern himself with the opinions of a sheep.”​

“Nothing FUCKS you harder than time.”​

“You pray for rain, you gotta deal with the mud too. That’s a part of it.”​

“I’d be more frightened by not using whatever abilities I’d been given.”​

“Luck is where opportunity meets preparation.”​

“If you have an enemy, then learn and know your enemy, don’t just be mad at him or her.”​

“Every failed experiment is one step closer to success.”​

When you work on a computer your hands travel 20 kilometres a day!​

Fugaku supercomputer is the world’s fastest computer. The $1-billion supercomputer has 7,630,848 cores, requires 29,899 kilowatts of electricity, and can execute 442,010 teraFLOPs.​

“Every day, about 317 million new viruses are discovered.​

“Microsoft’s founder, the infamous Bill Gates, was actually a college dropout."​

Did you know?​

“On average, a human blinks 20 times per minute, but using a computer reduces it to 7."​

Did you know?​

“The most common password for a computer and social media platforms is 123456."​

Did you know?​

“There are eight varieties of computers: mainframe, supercomputer, workstation, personal computer, Apple Macintosh, laptop, tablet, and smartphone."​

Did you know?​

“Linux leads the industry as it is used by Google, Facebook, Twitter, and Amazon."​

Did you know?​

“NASA computers were hijacked by a 15-year-old, resulting in a 21-day halt."​

Did you know?​

“You may heat a room with Gaming PCs more effectively than a heater."​

Did you know?​

“Physical money accounts for just around 10% of global cash, while the rest is stored on computers."​

Did you know?​

“YouTube actually started as a dating website." (Oh crap xD)​

Did you know?​

“Before they could progress as stable brands, Microsoft, HP, and Apple began manufacturing computers in their Garages."​

Did you know?​

“For every 12 million email spams, only one gets a reply."​

Did you know?​

“Banks and other corporate giants hire white hats or “good hackers” to help fix security issues and prevent system infiltration."​

Did you know?​

Currently reading:
Bot Jinkusu Starkiller https://t.me/jinkusureverse (1 Viewer)

"S'all Good, Man."

"Perfection Is The Enemy Of Perfectly Adequate."

"Money Is The Point!"

"I Travel In Worlds You Can't Even Imagine."

"Say Nothing, You Understand? Get A Lawyer!"

“Confidence is good. Facts on your side, better.”

“Facts are facts.”

“Sometimes the good guys win.”

“I’m not good at building shit, you know? I’m excellent at tearing it down.”

“Money is not beside the point… Money is the point.”

“Whoa, whoa. Hold up. What the hell happened to you? I get it, the first rule of Fight Club, right?”

“A good magician never reveals his secrets.”

“Got to look successful to be successful.”

“The lesson is, if you’re gonna be a criminal, do your homework.”

“If I had to do it all over again, I would maybe do some things differently. I just thought you should know that.”

“Some men aren't looking for anything logical. They can't be bought, bullied, reasoned or negotiated with. Some men just want to watch the world burn.”

"Ernest Hemingway once wrote, "The world is a fine place and worth fighting for." I agree with the second part."

“There’s no better way to destroy someone’s life than to uncover their secrets.”

“Hackers are breaking the systems for profit. Before, it was about intellectual curiosity and pursuit of knowledge and thrill, and now hacking is big business.”

“Hackers often describe what they do as playfully creative problem-solving.”

“Computer hackers do not need to know each other’s real names, or even live on the same continent, to steal millions in mere hours."

“While many hackers have the knowledge, skills, and tools to attack computer systems, they generally lack the motivation to cause violence or severe economic or social harm.”

“Very smart people are often tricked by hackers, by phishing. I don’t exclude myself from that. It’s about being smarter than a hacker. Not about being smart.”

“At the end of the day, my goal was to be the best hacker.”

“Humiliation is the favorite currency of the hacker.”

“The hacker didn’t succeed through sophistication. Rather he poked at obvious places, trying to enter through unlocked doors. Persistence, not wizardry, let him through.”

"Rules. Without Them We Live With The Animals.”

“Consider This A Professional Courtesy.”

"I've Lived My Life My Way, And I'll Die My Way."

"You stabbed the devil in the back, and forced him back into the life that he had just left."

"You Want A War, Or Do You Want To Just Give Me A Gun?"

"Leave one wolf alive and the sheep are never safe."

"When you play the game of thrones, you win or you die. There is no middle ground."

"It's not easy to see something that’s never been before: A good world."

"I believe in second chances. I don't believe in third chances."

"If you only trust the people you grew up with, you won't make many allies."

"A man with no motive is a man no one suspects. Always keep your foes confused: If they don't know who you are, what you want—they can't know what you plan to do next."

"Never forget what you are, the rest of the world will not. Wear it like armor and it can never be used to hurt you."

"I try to know as many people as I can. You never know which one you'll need."

"It's hard to put a leash on a dog once you've put a crown on its head."

“Everything before the word ‘but’ is horseshit.”

“A lion doesn’t concern himself with the opinions of a sheep.”

“Nothing FUCKS you harder than time.”

“You pray for rain, you gotta deal with the mud too. That’s a part of it.”

“I’d be more frightened by not using whatever abilities I’d been given.”

“Luck is where opportunity meets preparation.”

“If you have an enemy, then learn and know your enemy, don’t just be mad at him or her.”

“Every failed experiment is one step closer to success.”

When you work on a computer your hands travel 20 kilometres a day!

Fugaku supercomputer is the world’s fastest computer. The $1-billion supercomputer has 7,630,848 cores, requires 29,899 kilowatts of electricity, and can execute 442,010 teraFLOPs.

“Every day, about 317 million new viruses are discovered.

“Microsoft’s founder, the infamous Bill Gates, was actually a college dropout."

Did you know?

“On average, a human blinks 20 times per minute, but using a computer reduces it to 7."

Did you know?

“The most common password for a computer and social media platforms is 123456."

Did you know?

“There are eight varieties of computers: mainframe, supercomputer, workstation, personal computer, Apple Macintosh, laptop, tablet, and smartphone."

Did you know?

“Linux leads the industry as it is used by Google, Facebook, Twitter, and Amazon."

Did you know?

“NASA computers were hijacked by a 15-year-old, resulting in a 21-day halt."

Did you know?

“You may heat a room with Gaming PCs more effectively than a heater."

Did you know?

“Physical money accounts for just around 10% of global cash, while the rest is stored on computers."

Did you know?

“YouTube actually started as a dating website." (Oh crap xD)

Did you know?

“Before they could progress as stable brands, Microsoft, HP, and Apple began manufacturing computers in their Garages."

Did you know?

“For every 12 million email spams, only one gets a reply."

Did you know?

“Banks and other corporate giants hire white hats or “good hackers” to help fix security issues and prevent system infiltration."

Did you know?

“If Earth stopped rotating for 1 second, everyone would die."

Did you know?

“If someone made a sound of 1100db or larger a black hole would form sucking in our whole solar system."

“People shouldn't be afraid of their government. Governments should be afraid of their people.”