~Gozor~ Finished Payload

[geocine]

i'll try to post a repacked version of the ISO here.. the files will be p4ck3d so that it will not be pissed by common antivirx

i'll try to include the SBS. quite busy with school. i'll get back asap..  :???:

[dr.kaos]

@ Everyone who keeps posting questions that aren't about GonZors payload/Haven't read the thread.

You don't... at least not with Gonzors switchblade, it doesn't support the antidote yet.  Search before you ask too, it would probably have turned up an answer, such as the antidote...

Also, please read the entire thread before posting, many of the answers to your problems are inside it.

Actually, the antidote does work with Gonzor's payload, per my testing with several virtual machines.

And FWIW, cut new posters some slack. Reading 8 pages of posts looking for some variation on a phrase that may or may not lead you to removal instructions isn't always an effective or efficient means of finding a solution. In fact, if someone in the forum had previously indicated that the antidote doesn't work, the previous poster would have gotten bad information, as I can confirm that the original Haksaw antidote does work with Gonzor's current payload.

Forums are for sharing. If you don't have the time to read and reply to everyone else's posts, fine -- leave it to another forum member. No need to be an ass and expect everyone with a question to read every message within every thread that contains "gonzor," or it would take hours (if not days) just to sort through the hundreds of messages, even when the answer is to be found nowhere therein.

[trustme]

Actually, the antidote does work with Gonzor's payload, per my testing with several virtual machines.

I never said it didn't.  In fact, you might suspect it would because GonZor used the packages that the antidote was created for, with only slight modifications.

And FWIW, cut new posters some slack. Reading 8 pages of posts looking for some variation on a phrase that may or may not lead you to removal instructions isn't always an effective or efficient means of finding a solution. In fact, if someone in the forum had previously indicated that the antidote doesn't work, the previous poster would have gotten bad information, as I can confirm that the original Haksaw antidote does work with Gonzor's current payload.

Forums are for sharing. If you don't have the time to read and reply to everyone else's posts, fine -- leave it to another forum member. No need to be an ass and expect everyone with a question to read every message within every thread that contains "gonzor," or it would take hours (if not days) just to sort through the hundreds of messages, even when the answer is to be found nowhere therein.

Your response actually leads me to believe your one of the people who didn't read the thread...

See in my post I gave two pieces of information, both of which you missed.  The first is that GonZors switchblade doesn't support the antidote, nowhere in sbconfig can it be accessed.  You could have found this out on the wiki as well.  If you had further read the thread you would have noticed it was to be included in later versions.  Also you would have found that the answer to the poster question, that to uninstall the hacksaw you could use the antidote.

Search before you ask too, it would probably have turned up an answer, such as the antidote...

Also, we wouldn't have 8 pages if we didn't have a bunch of junk in the thread, admittedly some of this junk isn't related to simple questions.

The poster could have just posted a new thread, i check the USB hacks subforum twice a day during the week at the very least.

In the future I guess I could be nicer as well.  Seriously though, read first.

[GonZor]

Yes the standard HakSaw antidote works with my payload but it is not perfect, In future versions I will be supplying a better antidote and also an antidote for VNC. rpk5000 is part of the dev team for the payload, he is aware of what is coming in future versions and by saying "it doesnt support it yet" actually meant I haven't released my antidote which will be included as a button in SBConfig.

I'll appologise now for slow development of the payload, I am currently working 50+ hours a week and am struggling to find time, but we have a new dev team and several components in the works which are quite different to the normal switchblade. we are also building a new site to host the payload which we hope to have finished soon.

I am also looking into the no disk error issue, I have fixed the original error but some of the tools used are causing another no disk error. these tools are network passwords dump and messenger passwords dump. The dev team will be looking at fixes/alternatives but until we have found a solution disabling these should remove all no disk errors.

In the future I guess I could be nicer as well.  Seriously though, read first.

Maybe just a little less hostile, but I do agree about the reading. To get a full understanding of the payload it is worth while reading all the posts, a lot of the longer post's are mainly code and it doesn't take long to read a few lines per post. Of course once the new site is up we will create a better FAQ and make it easier so you can find the answer quicker but there is still a lot of useful information in this thread.

[skiilz]

I'm having a problem with this - I DID read thru the board, but the issue that I'm having is after now I can't even access my flash drive or the u3 partition after running the customizer executable. .  If anyone can help me with this - that would be great!  My drive no longer seems to work at all. .  It's sitting here all lit up and whatnot.  Hellp!!    :-?

[GonZor]

I'm having a problem with this - I DID read thru the board, but the issue that I'm having is after now I can't even access my flash drive or the u3 partition after running the customizer executable. .  If anyone can help me with this - that would be great!  My drive no longer seems to work at all. .  It's sitting here all lit up and whatnot.  Hellp!!    :-?

By saying it no longer works, do you mean the drives aren't mapped (can computer management see the drives)? Did an error occur while flashing the drive? Have you tried this on any other computers?

[USBHacker]

Is there a non-u3 version of this?

If not please make one!

Thanks in advance,

USBHacker

[GonZor]

Is there a non-u3 version of this?

If not please make one!

Thanks in advance,

USBHacker

I'm not even going to answer that for several reasons,

1- Another member of the Dev team (rpk5000)  has told you several times the exact post to look at to find your answer.

2- You need to learn to read before you post, how are you going to learn anything if we feed you the information?

3- Even after you were given the link to the exact post you need to read, you ask us the same question again.

4- I (and many others) are sick of you and your crap!

Some of you may think this is unfair others may completely agree with what i just stated, to others who are looking for help i as well as the rest of the dev team are always willing to help If you are willing to learn.

[USBHacker]

^I don't want to make my drive u3

I want it to be able to use your payload though

(I want to see how good it is...)

[trustme]

I'm going to spell it out for ya...

The following are pms from me to USB Hacker and back, I think I have most of them....

This is my first pm to him

Usb Switchblade

« Sent to: USBHacker on: Thursday September 27, 2007, 23:25:54 »

I'm going to help you out just to stop you from further posting....

You never heard this from me...

Have you looked at Gonzor's payload?  Reply 117 on Page 6 of GonZors thread.  He explains how to use his payload on non-U3 flash drives.  Use that.  Sbconfig is a gui that turns parts of the payload on and off.  Its incredibly simple.  Oh, and Gonzor doesn't want any Qs on how to make it work, it's self explanatory and slightly unofficial.

For Questions, See Google.

His Reply

Re: Usb Switchblade

« Sent to: rpk5000 on: Friday September 28, 2007, 04:23:22 »

Thanks

(This is right? http://forums.hak5.org/index.php/topic,7359.0.html)

Hope it will work! Razz

Did he read my pm at all?

(No subject)

« Sent to: USBHacker on: Friday September 28, 2007, 06:21:59 »

I thought you had said you didn't have a u3 flash drive.  In which case you need to follow the instructions in the post number i gave in GonZor's thread.

I try to explain it some more...

Re: (No subject)

« Sent to: rpk5000 on: Friday September 28, 2007, 07:37:09 »

huh?

I don't have a U3 device! (I had one for a short time, but I don't have one anymore!)

Can he read?

Re: (No subject)

« Sent to: USBHacker on: Friday September 28, 2007, 20:25:31 »

I thought you had said you didn't have a u3 flash drive.

(I try to help him read...)

Yes I know you don't have a U3 drive.  However, Gonzors payload is for u3 drives, which is why the universal customizer doesn't work.  If you had done what i said, and looked up the post number in GonZors thread, he describes how to install his payload without having a u3 drive.  So it'll work on a regular flash drive.

I give up....

[USBHacker]

^hehehehe

So...

I don't want a U3 USB.

I want a 'hacking' USB, that is non-u3.

Panarchy

PS: can't you read?

[GonZor]

^hehehehe

So...

I don't want a U3 USB.

I want a 'hacking' USB, that is non-u3.

Panarchy

PS: can't you read?

This is my final try at helping you with this, I dont know if it could be made any simpler...

READ THIS POST! - http://forums.hak5.org/index.php/topic,660...7.html#msg75477

If you cannot figure out it out from that post I ask you please to leave and go learn before coming back because your obviously in over your head, I don't really care if this sounds mean but you must learn to crawl before you can walk.

P.S. - Yes me and rpk5000 can read, we have tried to help you as much as possible but you are obviously not reading the post we have told you to. In case you somehow didn't see the link here it is AGAIN!

http://forums.hak5.org/index.php/topic,660...7.html#msg75477

http://forums.hak5.org/index.php/topic,660...7.html#msg75477

http://forums.hak5.org/index.php/topic,660...7.html#msg75477

http://forums.hak5.org/index.php/topic,660...7.html#msg75477

http://forums.hak5.org/index.php/topic,660...7.html#msg75477

http://forums.hak5.org/index.php/topic,660...7.html#msg75477

http://forums.hak5.org/index.php/topic,660...7.html#msg75477

[USBHacker]

Thanks

(READ THIS POST! - http://forums.hak5.org/index.php/topic,660....html#msg75477)

I will download that, and use it.

USBHacker

PS: Review coming soon!

[USBHacker]

Hmm... I suppose it must be a lot better on the U3 version.

The non-u3 sucks.

Anyways,

USBHacker

PS: Can anyone be bothered teaching me how to add the gmail thing to my payload? So that it sends everything in logfiles, then deletes logfiles?

[SomeoneE1se]

Hmm... I suppose it must be a lot better on the U3 version.

The non-u3 sucks.

Anyways,

USBHacker

PS: Can anyone be bothered teaching me how to add the gmail thing to my payload? So that it sends everything in logfiles, then deletes logfiles?

Please NO ONE tell him how to do this make him learn himself!

[USBHacker]

^FU

[SomeoneE1se]

^FU

<flame war>Fuck off and die prick I've been one of the only ones who has not been calling for a perma ban on you, so do a little work yourself for a change and stop acting like the dumb shit that you are.  As much as I have been willing to help out I'm done I'm going to try to screw you over at every turn</flame war>

this is the last I'll post in this thread I'll make because I don't want gonzors payload thread to get locked becasue if n00bs

[GonZor]

^FU

<flame war>Fuck off and die prick I've been one of the only ones who has not been calling for a perma ban on you, so do a little work yourself for a change and stop acting like the dumb shit that you are.  As much as I have been willing to help out I'm done I'm going to try to screw you over at every turn</flame war>

this is the last I'll post in this thread I'll make because I don't want gonzors payload thread to get locked becasue if n00bs

Thanks man, but I completely agree with you, he needs to grow up and learn for himself. "Give someone a fish and they will eat for a day, teach them to fish and they will eat for a lifetime" - I think this quote is quite relevant.

PS: Can anyone be bothered teaching me how to add the gmail thing to my payload? So that it sends everything in logfiles, then deletes logfiles?

You will not get any help from me, I agree with SomeoneE1se NO ONE should help you with this.

[SomeoneE1se]

^FU

<flame war>Fuck off and die prick I've been one of the only ones who has not been calling for a perma ban on you, so do a little work yourself for a change and stop acting like the dumb shit that you are.  As much as I have been willing to help out I'm done I'm going to try to screw you over at every turn</flame war>

this is the last I'll post in this thread I'll make because I don't want gonzors payload thread to get locked becasue if n00bs

Thanks man, but I completely agree with you, he needs to grow up and learn for himself. "Give someone a fish and they will eat for a day, teach them to fish and they will eat for a lifetime" - I think this quote is quite relevant.

PS: Can anyone be bothered teaching me how to add the gmail thing to my payload? So that it sends everything in logfiles, then deletes logfiles?

You will not get any help from me, I agree with SomeoneE1se NO ONE should help you with this.

The one that come to mind in this case

Build a n00b a file he'll be warm for a night    Set a n00b ON fire he'll be warm for the rest of his life

[marc]

Someone who is too unintelligent to understand anything like U3 technology, Gonzor's clear instructions, rpk's clear instructions on where to find gonzors payload, does NOT deserve to use gonzor's payload.

Gonzor's payload is awesome, and i do not think it should be available to idiots.

Im not pointing fingers, I'm just saying. A lot of work went in to this, for non profit, education, and for other's fun. Please obay the devteam, and let us help you, and try to have common sense.

Can we all move on ?

[SomeoneE1se]

Someone who is too unintelligent to understand anything like U3 technology, Gonzor's clear instructions, rpk's clear instructions on where to find gonzors payload, does NOT deserve to use gonzor's payload.

Gonzor's payload is awesome, and i do not think it should be available to idiots.

Im not pointing fingers, I'm just saying. A lot of work went in to this, for non profit, education, and for other's fun. Please obay the devteam, and let us help you, and try to have common sense.

Can we all move on ?

well said time to move on

[Supervisor]

First a great payload!! i don`t think how to make it more good from now just perfect! great job!  :P

I have a few question:

1. After i plug out the u3 i have a 2 file of log on my c drive.

2. It`s say`s that the tunnel something.. can`t create the proceses..

3. I have a lot of BLAT ( The app that sends all in the mail ) and they taking a lot of a memory.

for any more info. just say it :)

[SB62]

so first off, kudos to gonzor and his dev team on a great little tool.  i'm going to school to become a network security specialist, and this stuff is really interesting to play around with.  now i've read over the topic, and maybe i missed the answer to my problem, but here goes:

when i insert my drive into my windows xp computer, i can't find the sys folder where the logs are stored on the flash partiton of my drive (4g sandisc cruiser) but if i load the drive on my ubuntu linux box, it shows up fine, no problems at all.  now i thought it might be due to hacksaw, so i used the antidote, but it still won't show up on the windows box.  any ideas?

[trustme]

If I had to guess I would say that your windows box doesn't have system and hidden folders set to viewable, because the sys folder is set to hidden.  And since ubuntu probably doesn't obey windows tags, i'd say that'd be why. 

That's my guess though, most people who download the payload would have those types of files set to viewable, maybe something got messed up in your settings.

[SB62]

right you were, guess i forgot to set those last time i reinstalled windows. thans for the solution ^.^