Hack Forums
[Tutorial] Stealing files through Windows shortcuts. - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [Tutorial] Stealing files through Windows shortcuts. (/showthread.php?tid=4670333)

Pages: Pages 1 2

[Tutorial] Stealing files through Windows shortcuts. - Yoshikage Kira - Feb 4, 2015

In this tutorial i'll teach you how to steal files through windows shortcuts.
First let me tell you how it works:
When you select a shortcut to upload, it gives you the file the shortcut points to. Thus you can steal any file you want by making them select the shortcut when uploading a file, the problem with this is most file uploaders show the file name that's being uploaded, but don't worry! I provide a solution to bypass this.

Things you'll need:

After you create your free website, create a new database.
[Image: 6yaaYuL.png]
Then go to config.php and edit it with the details:
[Image: odJNpLY.png]
Next install file manager and delete default.php, then upload the stealer files.
[Image: nIeiFQc.png]
Then go to phpmyadmin & import database.sql:
[Image: YLqZ8He.png]
MAKE SURE TO CHANGE THE DEFAULT CREDENTIALS
Next go to http://website/stolen.php where website is your website & login with your credentials(default is greed@:perfect123 in user:pass format).
Now add an id & descriptor for the id:
[Image: QRnQHWM.jpg]
I added the id 1234 with the descriptor "Greed's secret file".
[Image: afOX6gR.png]
Now we'll create the shortcut:
Let's suppose you want to steal the file C:\code\credentials.txt:
[Image: igjMEIb.png]
Then you'll create the folder code in C:\ & create the file credentials.txt.
Then you'll right click and do new->shortcut:
[Image: o8Hzaqs.png]
Then you'll input C:\code\credentials.txt
[Image: c3IGOn5.png]
Hit next & name it whatever you want:
[Image: bLUcWx0.png]
Then click finish.
Next go to http://website/stealer.php?id=1234 to make sure it's working properly. If it appears all right:
[Image: r82us5X.jpg]
then you send them the shortcut & have them upload it to your website:
[Image: HF9b7bh.png]

Please be aware that relative paths don't work(ex: %AppData% or %Temp%), thus if you want to steal their Google Chrome cookies file you'll need to get their username on their computer and input the absolute path.

* - a.playcard - Feb 4, 2015

its awesome bro .. keep up ;) thanks anyway

* - AutononymousGirlFriend - Feb 4, 2015

such a nerd :( i wish i was dis smartical

* - Articulate - Feb 8, 2015

Thank you so much, This helped me alot :D

* - Abzorb - Feb 8, 2015

thanks a lot this helped me aa lot\! ;)

* - Yoshikage Kira - Feb 9, 2015

Glad to have helped :), updated broken links.

* - zw0scura - Feb 21, 2015

Good Job man, nice tutorial, look forward ✌

* - 1999 - Feb 21, 2015

awsome tut man very helpful :) cant wait for more :D

* - chernobiLe - Feb 21, 2015

ahah its brilliant thank you for tutorial man

* - lukejx2 - Feb 22, 2015

damn son this looks good :) ok so i'm gonna look for a free hosting site now - any recommendations on which to use? what's a good path to use? do you write your own path inside the ''cridentials.txt'' file or? thanks in advanced, great post OP :)

for me it says ''create a hosting account'' before I can make a website, but the link doesn't work to create a hosting account :s

* - Yoshikage Kira - Feb 22, 2015

(Feb 22, 2015 06:14 AM)lukejx2 Wrote:  damn son this looks good :) ok so i'm gonna look for a free hosting site now - any recommendations on which to use? what's a good path to use? do you write your own path inside the ''cridentials.txt'' file or? thanks in advanced, great post OP :)

for me it says ''create a hosting account'' before I can make a website, but the link doesn't work to create a hosting account :s

A shortcut won't be created if the file doesn't exist, so you'll have to create the directories and file yourself mimicking the target's path.

* - Niely - Feb 22, 2015

This is a really smart method.
Thanks for sharing this mate!

* - Nalgun - Mar 2, 2015

Thanks for the tutorial really helpful, i appreciated it

* - chernobiLe - Mar 2, 2015

awsome tut man very helpful :) thank you so much

* - UknownG. - May 6, 2015

Short and easy tutorial but very helpful