EvilZone

Programming and Scripting => Projects and Discussion => : Synfer May 08, 2015, 02:16:02 PM

: USB Cookie Stealer
: Synfer May 08, 2015, 02:16:02 PM

 Hi everyone,I wanted to show you a little project I'm working on, I called it the USB Cookie Stealer.The title is pretty self explaining, but first of all let me precise this is purely theorical and based on the fact that the program will autorun itself.
Please note I made some serious assumptions, maybe it wont work at all, I'm still learning and  a total newbie, the first purpose of this is knowledge.

First of all, you'll need a U3 usb key. Why ?  Because these usb sticks have 2 parts, one normal usb part, and another one wich acts like a CD. But why an U3 ? Well, this program will have to autorun ( at least to me, maybe I'm wrong ), and windows only allows programs coming from CDs to autorun.

I'll write it in Python, so l have to find a way to run it on any computer. I don't know if installing Python on the key ( portable version ) or make it executable.
So, now that our program should be able to automatically run, we'll have to :
   Kill the active navigators
   Find our way into the place where the differents browsers store their cookie
   Copy them
   Run away
 I'll update this as soon as I'll be able to add some content, meanwhile please share you thoughts etc, any help is appreciated !  :)

: Re: USB Cookie Stealer
: iTpHo3NiX May 08, 2015, 05:24:01 PM

Or just get/build a rubber ducky and just run a simple script, but I suppose that'd be too easy lmfao

: Re: USB Cookie Stealer
: Synfer May 08, 2015, 07:03:24 PM

I want to learn with this, so just buying a RD wouldn't really help  :-\
Anyway I'll look at this if I can grab some informations, thanks DeepCopy   :)

: Re: USB Cookie Stealer
: iTpHo3NiX May 08, 2015, 11:17:22 PM

: Synfer  May 08, 2015, 07:03:24 PM

I want to learn with this, so just buying a RD wouldn't really help  :-\
Anyway I'll look at this if I can grab some informations, thanks DeepCopy   :)

Get a teensy and build your own ducky.  The point is to tell the computer it's HID (keyboard) and have it initiate keyboard presses. It's the new switchblade auto run since it's been disabled for usb devices. But hey a learning experience, go for it however you want

: Re: USB Cookie Stealer
: Kulverstukas May 09, 2015, 11:24:10 AM

U3 has died along with Win7 I think, when autorun is disabled on everything. What you want is a Teensy, it would be much better and cost as much as that U3, maybe even less if you live in murica.

Try these:
https://evilzone.org/hardware/diy-hardware-keylogger-using-teensy/
https://evilzone.org/c-c/%28arduino%29-payload-launcher-for-teensy/