Making your flash drive an ultimate hacking tool

XMAN

Active member
Joined
Jul 12, 2021
Messages
19,623
Reaction score
20
Points
38
Making your flash drive an ultimate hacking tool #1
We can make a USB flash drive become our ultimate hacking tool...

Normally we do this in order for us to obtain critical information such as passwords...

Some of the example for U3 USB flash drive are SanDisk Cruzer Micro, SanDisk Cruzer Titanium and Memorex Mini TravelDrive.They are more expensive than the normal USB flash drive.



The concept of how can U3 smart drive autorun program is quite simple. Normal USB flash drives only has 1 drive letter but for U3 smart drive, it has 2 drives. One is the normal storage drive and the other one is an emulated CD drive.



USB Switchblade goal is to silently recover information from computers running Windows 2000 or higher. It is able to get password hashes, LSA secrets, IP information, etc… USB Switchblade also requires administrative privileges in order to run the payload. I will demonstrate on how to hack U3 smart drive with -=GonZor=- SwitchBlade technique.

1. Download -=GonZor=- Payload V2.0

2. Download Universal Customizer

3. Unzip the Universal Customizer to “C:\Universal_Customizerâ€

4. Unzip the -=GonZor=- Payload V2.0 to “C:\Payloadâ€

5. Copy the file U3CUSTOM.ISO from C:\Payload to C:\Universal_Customizer\BIN replacing the old one.

6. Run C:\Universal_Customizer\Universal_Customizer.exe and plug in U3 smart drive.
- Select Accept and click Next.
- Close all U3 applications and any applications that access your U3 drive and click Next.
- Set a password for the backup zip file (Empty password not allowed)
- Click Next and it will start backing up data. Wait for the Universal Customizer to modify your CD partition and replace your files to the flash drive.
- The modification should now be complete, Unplug your U3 Drive and plug it back in
7. Copy “C:\Payload\SBConfig.exe†to the mass storage of the flash drive

8. Run SBConfig.exe from flash drive

- Select the check boxes of the Payload options you would like to use
- Enter your email address and password for the HackSaw if you wish to use it.
- Click “Update Config†button, a message box should appear to confirm this is completed
- Toggle between using the payload or not by clicking the “Turn PL Onâ€/â€Turn PL Off†button
- Toggle between using the U3 Launcher or not by clicking the “Turn U3 Launchpad Onâ€/â€Turn U3 Launchpad Off†button

9. You now have -=GonZor=- Payload V2.0 in your U3 smart drive which can automatically steal password once it is plugged in to a computer with administrative privileges.

Download link:
-=GonZor=- Payload V2.0

Universal Customizer

Some of the antivirus softwares will detect it as malwares,but it is not...Biggrin

Well thats it... Have fun..CoolWink
 
Top