Hacking is not always to take advantage of people’s privacy.
But, it is also to prevent being hacked. As you may know that the Windows operating system is easily hack-able because of it’s file structure. Since it is more user-friendly over one billion users are using windows 10 alone.
Windows and it’s supporting browsers re saving credentials such as passwords mostly in plain text format. It is like leaving the key in the lock.
Users who stay online in all the time who won’t signed out their account rapidly. Accounts such as Facebook, Outlook, internet banking etc.
We can retrieve the password text from these machines with the help of some basic programs.
But here we are going to create an all in one programming tools in a usb drive. With this , we can able to collect passwords from the host by plugin the usb.
Note: for education purpose only.
We need to download some apps listed below. Don’t get bored to see the list. A perfect USB stealer needs more apps.
1 . mspass.exe
Mspass can be used only to recover passwords for users that are logged in to the local computer where the password is stored, so if you’re normally logged in as the default administrator, you’re going to have to be logged in as the administrator to access the lost password of (ie.) Windows Live Messenger.
It is a recovery tool which is compatible with Windows XP, Windows Vista and Windows 7 that reveals the passwords of the following instant messenger applications:
Windows Messenger (In Windows XP)
Windows Live Messenger (In Windows XP/Vista/7)
Yahoo Messenger (Versions 5.x and 6.x)
ICQ Lite 4.x/5.x/2003
AOL Instant Messenger v4.6 or below, AIM 6.x, and AIM Pro.
Download MSpassword here : https://www.nirsoft.net/toolsdownload/mspass.zip
2 . mailpv.exe
Mail PassView is a small e-mail password-recovery tool for Windows PC that reveals the passwords and other account details for the following email clients:
Microsoft Outlook 2000 (POP3 and SMTP Accounts only)
Microsoft Outlook 2002/2003/2007/2010/2013/2016 (POP3, IMAP, HTTP and SMTP Accounts)
Windows Live Mail
Netscape 6.x/7.x (If the password is not encrypted with master password)
Mozilla Thunderbird (If the password is not encrypted with master password)
Group Mail Free
Yahoo! Mail — If the password is saved in Yahoo! Messenger application.
Hotmail/MSN mail — If the password is saved in MSN/Windows/Live Messenger application.
Gmail — If the password is saved by Gmail Notifier application, Google Desktop, or by Google Talk.
For each email account, the following fields are displayed: Account Name, Application, Email, Server, Server Type (POP3/IMAP/SMTP), User Name, and Password. This utility is a standalone executable. It doesn’t require any installation process or additional DLLs. Just run the executable (mailpv.exe) and watch the list of your email accounts. You can save the account information into a text file or copy them to the clipboard.
Download mailpv here: https://www.nirsoft.net/toolsdownload/mailpv.zip
3 . iepv.exe
IE PassView is a small password management utility that reveals the passwords stored by Internet Explorer Web browser.You can select one or more items from the passwords list and export them into text/html/csv/xml file. IE PassView allows you to delete passwords that you don’t need anymore. It supports all versions of Internet Explorer, from version 4.0 and up to 9.0.
For each password that is stored by Internet Explorer, the following information is displayed: Web address, Password Type , Storage Location and the user name/password pair.
E PassView also allows you to extract the passwords of Internet Explorer and Microsoft Edge from external hard drive.
Download here: https://www.nirsoft.net/toolsdownload/iepv.zip
4 . pspv.exe
Protected Storage PassView is a small utility that reveals the passwords stored on your computer by Internet Explorer, Outlook Express and MSN Explorer. The passwords are revealed by reading the information from the Protected Storage.
Starting from version 1.60, this utility reveals all AutoComplete strings stored in Internet Explorer, not only the AutoComplete password, as in the previous versions.
Download here: https://www.nirsoft.net/toolsdownload/pspv.zip
5 . Passwordfox.exe
PasswordFox is a small password recovery tool that allows you to view the user names and passwords stored by Mozilla Firefox Web browser. By default, PasswordFox displays the passwords stored in your current profile, but you can easily select to watch the passwords of any other Firefox profile. For each password entry, the following information is displayed: Record Index, Web Site, User Name, Password, User Name Field, Password Field, and the Signons filename.
Note: you can also search for operpass, chrompass
Download here: https://www.nirsoft.net/toolsdownload/passwordfox-x64.zip
6 . Dialuppass.exe
Dialupass enumerates all dial-up/VPN entries on your computers and displays their login details including User Name, Password, and Domain. You can use Dialupass to recover a lost password of your Internet connection or VPN.
Dialupass also allows you to save the dial-up/VPN list into text/HTML/CSV/XML file, or copy it to the clipboard.
Download here: https://www.nirsoft.net/toolsdownload/dialupass.zip
7 . Netpass.exe
The app can be used to read passwords from the current operating system or from an external drive where you installed Windows. The external drive can be also from another Windows computer. It can recover the following passwords.
Login passwords of remote computers on your LAN.
Passwords of mail accounts on exchange server (stored by Microsoft Outlook)
Password of MSN Messenger / Windows Messenger accounts
Internet Explorer 7.x and 8.x: passwords of password-protected Web sites (“Basic Authentication” or “Digest Access Authentication”)
The item name of IE7 passwords always begin with “Microsoft_WinInet” prefix.
The passwords stored by Remote Desktop 6.
Download here: https://www.nirsoft.net/toolsdownload/netpass-x64.zip
8 . Wirelesskeyview.exe
This freeware lets users view passwords stored by the WiFi Manager. Its spreadsheet-like main window displays all WEP/WPA that are stored in the computer.
It can also view ASCII keys, HEX keys and adapter GUID. With WirelessKeyview, users can take full advantage of WiFi spots at all times.
9 . Bulletspassview.exe
BulletsPassView is a password recovery tool that reveals the passwords stored behind the bullets in the standard password text-box of Windows operating system and Internet Explorer Web browser. After revealing the passwords, you can easily copy them to the clipboard or save them into text/html/csv/xml file. BulletsPassView doesn’t reveal the password inside the password text-box itself. The password is only displayed in the main window of BulletsPassView, while the password text-box continues to display bullets.
BulletsPassView also supports Windows 7/Vista/2008, while Asterisk Logger failed to work in these new operating systems.
BulletsPassView also reveals the passwords stored in the password text-box of Internet Explorer.
BulletsPassView supports command-line options to save the current opened password boxes into text/html/csv/xml file.
BulletsPassView is a unicode application, which insures that passwords with non-English characters will be extracted properly.
Download here: https://www.nirsoft.net/utils/bulletspassview-x64.zip
10 . VNCPassView.exe
VNCPassView is a free app that can recover the passwords stored by the VNC (Virtual Network Computing) tool.
VNCPassView can recover both the passwords immediately when run. they are:
1: The password stored for the currently logged-on user (HKEY_CURRENT_USER in the Registry)
2: The password stored for all users.
download here: https://www.nirsoft.net/toolsdownload/vncpassview.zip
step 1: There are many other staling apps are available. Now we need to extract the files you downloaded to your desktop and copy all the .exe files to your USB.
step2: Open notepad/wordpad and type:
save this as AUTORUN.inf
- step 3 :open a new notepad/wordpad document and type:
save this as LAUNCH.bat
copy the autorun and launch file to your USB
- step4: remove and re-insert your USB
click on the option perform a virus scan
(this is an example, if you want it to say something else go to the autorun file and change it )
go to my computer — -> USB DRIVE and open it
you will now see some text files, if you open them you will see usernames and passwords
NOTICE: This only recovers passwords that have once been saved on your computer.
Thank you guys , see you again.
Source: tech duck @medium