Author Topic: USB Cookie Stealer  (Read 1319 times)

0 Members and 1 Guest are viewing this topic.

Offline Synfer

  • Serf
  • *
  • Posts: 28
  • Cookies: 7
  • One fag to rule them all
    • View Profile
USB Cookie Stealer
« on: May 08, 2015, 02:16:02 pm »
 Hi everyone,I wanted to show you a little project I'm working on, I called it the USB Cookie Stealer.The title is pretty self explaining, but first of all let me precise this is purely theorical and based on the fact that the program will autorun itself.
Please note I made some serious assumptions, maybe it wont work at all, I'm still learning and  a total newbie, the first purpose of this is knowledge.

First of all, you'll need a U3 usb key. Why ?  Because these usb sticks have 2 parts, one normal usb part, and another one wich acts like a CD. But why an U3 ? Well, this program will have to autorun ( at least to me, maybe I'm wrong ), and windows only allows programs coming from CDs to autorun.

I'll write it in Python, so l have to find a way to run it on any computer. I don't know if installing Python on the key ( portable version ) or make it executable.
So, now that our program should be able to automatically run, we'll have to :
   Kill the active navigators
   Find our way into the place where the differents browsers store their cookie
   Copy them
   Run away
 I'll update this as soon as I'll be able to add some content, meanwhile please share you thoughts etc, any help is appreciated !  :)
« Last Edit: May 09, 2015, 11:18:01 am by Kulverstukas »
"A malicious program has attempted to shut down Windows. As a precaution, Windows was shut down."
We should create for the process, not the product.

Offline iTpHo3NiX

  • EZ's Pirate Captain
  • Administrator
  • Titan
  • *
  • Posts: 2920
  • Cookies: 328
    • View Profile
    • EvilZone
Re: USB Cookie Stealer
« Reply #1 on: May 08, 2015, 05:24:01 pm »
Or just get/build a rubber ducky and just run a simple script, but I suppose that'd be too easy lmfao
[09:27] (+lenoch) iTpHo3NiX can even manipulate me to suck dick
[09:27] (+lenoch) oh no that's voluntary
[09:27] (+lenoch) sorry

Offline Synfer

  • Serf
  • *
  • Posts: 28
  • Cookies: 7
  • One fag to rule them all
    • View Profile
Re: USB Cookie Stealer
« Reply #2 on: May 08, 2015, 07:03:24 pm »
I want to learn with this, so just buying a RD wouldn't really help  :-\
Anyway I'll look at this if I can grab some informations, thanks DeepCopy   :)
"A malicious program has attempted to shut down Windows. As a precaution, Windows was shut down."
We should create for the process, not the product.

Offline iTpHo3NiX

  • EZ's Pirate Captain
  • Administrator
  • Titan
  • *
  • Posts: 2920
  • Cookies: 328
    • View Profile
    • EvilZone
Re: USB Cookie Stealer
« Reply #3 on: May 08, 2015, 11:17:22 pm »
I want to learn with this, so just buying a RD wouldn't really help  :-\
Anyway I'll look at this if I can grab some informations, thanks DeepCopy   :)


Get a teensy and build your own ducky.  The point is to tell the computer it's HID (keyboard) and have it initiate keyboard presses. It's the new switchblade auto run since it's been disabled for usb devices. But hey a learning experience, go for it however you want
« Last Edit: May 08, 2015, 11:17:52 pm by DeepCopy »
[09:27] (+lenoch) iTpHo3NiX can even manipulate me to suck dick
[09:27] (+lenoch) oh no that's voluntary
[09:27] (+lenoch) sorry

Offline Kulverstukas

  • Administrator
  • Zeus
  • *
  • Posts: 6627
  • Cookies: 542
  • Fascist dictator
    • View Profile
    • My blog
Re: USB Cookie Stealer
« Reply #4 on: May 09, 2015, 11:24:10 am »
U3 has died along with Win7 I think, when autorun is disabled on everything. What you want is a Teensy, it would be much better and cost as much as that U3, maybe even less if you live in murica.

Try these:
https://evilzone.org/hardware/diy-hardware-keylogger-using-teensy/
https://evilzone.org/c-c/%28arduino%29-payload-launcher-for-teensy/