Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[Tutorial] Stealing files through Windows shortcuts.

In this tutorial i'll teach you how to steal files through windows shortcuts.
First let me tell you how it works:
When you select a shortcut to upload, it gives you the file the shortcut points to. Thus you can steal any file you want by making them select the shortcut when uploading a file, the problem with this is most file uploaders show the file name that's being uploaded, but don't worry! I provide a solution to bypass this.

Things you'll need:

After you create your free website, create a new database.
[Image: 6yaaYuL.png]
Then go to config.php and edit it with the details:
[Image: odJNpLY.png]
Next install file manager and delete default.php, then upload the stealer files.
[Image: nIeiFQc.png]
Then go to phpmyadmin & import database.sql:
[Image: YLqZ8He.png]
MAKE SURE TO CHANGE THE DEFAULT CREDENTIALS
Next go to http://website/stolen.php where website is your website & login with your credentials(default is greed@:perfect123 in user:pass format).
Now add an id & descriptor for the id:
[Image: QRnQHWM.jpg]
I added the id 1234 with the descriptor "Greed's secret file".
[Image: afOX6gR.png]
Now we'll create the shortcut:
Let's suppose you want to steal the file C:\code\credentials.txt:
[Image: igjMEIb.png]
Then you'll create the folder code in C:\ & create the file credentials.txt.
Then you'll right click and do new->shortcut:
[Image: o8Hzaqs.png]
Then you'll input C:\code\credentials.txt
[Image: c3IGOn5.png]
Hit next & name it whatever you want:
[Image: bLUcWx0.png]
Then click finish.
Next go to http://website/stealer.php?id=1234 to make sure it's working properly. If it appears all right:
[Image: r82us5X.jpg]
then you send them the shortcut & have them upload it to your website:
[Image: HF9b7bh.png]

Please be aware that relative paths don't work(ex: %AppData% or %Temp%), thus if you want to steal their Google Chrome cookies file you'll need to get their username on their computer and input the absolute path.
its awesome bro .. keep up ;) thanks anyway
such a nerd :( i wish i was dis smartical
Thank you so much, This helped me alot :D
thanks a lot this helped me aa lot\! ;)
Glad to have helped :), updated broken links.
Good Job man, nice tutorial, look forward ✌
awsome tut man very helpful :) cant wait for more :D
ahah its brilliant thank you for tutorial man
damn son this looks good :) ok so i'm gonna look for a free hosting site now - any recommendations on which to use? what's a good path to use? do you write your own path inside the ''cridentials.txt'' file or? thanks in advanced, great post OP :)


for me it says ''create a hosting account'' before I can make a website, but the link doesn't work to create a hosting account :s
(Feb 22, 2015 06:14 AM)lukejx2 Wrote:  damn son this looks good :) ok so i'm gonna look for a free hosting site now - any recommendations on which to use? what's a good path to use? do you write your own path inside the ''cridentials.txt'' file or? thanks in advanced, great post OP :)


for me it says ''create a hosting account'' before I can make a website, but the link doesn't work to create a hosting account :s

A shortcut won't be created if the file doesn't exist, so you'll have to create the directories and file yourself mimicking the target's path.
This is a really smart method.
Thanks for sharing this mate!
Thanks for the tutorial really helpful, i appreciated it
awsome tut man very helpful :) thank you so much
Short and easy tutorial but very helpful


Possibly Related Threads...
Thread / Author Replies Views Last Post
by Mr. RobotApr 22, 2017 01:27 PM 7 641 Apr 22, 2017 01:27 PM
Last Post: Clova
by SIM-2015410Feb 10, 2017 11:49 PM 8 1,589 Feb 10, 2017 11:49 PM
Last Post: IPIKIN
by Yoshikage KiraDec 12, 2016 01:33 PM 19 1,585 Dec 12, 2016 01:33 PM
Last Post: roosterbabe36