Im a Network security student and i am working on a project to quickly monitor a persons internet history, passwords, ect. with a flash drive. Irongeek shows a tutorial and i pretty much followed it bit by bit. Problem is my teacher brought up the fact that many people use google to do nsfw things. Specifically images. I am short 2 tools to complete my project. A tool that retrieves and lists recent google searches. And a tool that reads and stores firefox stored passwords. The Nmap site got me most of the way. And SIW almost worked for the firefox thing (only problem being it was big, slow and wouldnt store the passwords.) I need help on this one.

Also forgive me but I am only second semester so im not the most advanced one out there.Something simple or easy to learn is much perferable.

Thank you in advance,
MaT

To Added to your toolkit check out this site it has been recommended for most Computer Forensics and its free and stand alone tools runs under windows http://www.nirsoft.net/ Good Luck

Hi there about your thumb drive, you need to specify which OS Win 98,2kp ,XP or VIsta, am sure its Vista it does the driver loading thing.Now is this the OS in questiong.

Is it a U3 thumb drive? If so, there are numerous links out there on Google about how to create automated hacking tools. Here are a few:

http://www.hak5.org/wiki/USB_Hacksaw

http://www.raymond.cc/blog/archives/2007/11/23/hack-u3-usb-smart-drive-to-become-ultimate-hack-tool/

And here's one from Bruce Schneier with links and a discussion with more info to plow through:
http://www.schneier.com/blog/archives/2006/06/hacking_compute.html

Hope this helps,
Don

Hey, as long as you have that get out of jail free card (written permission) from your boss or your client, anything goes. 

Don

Heh, nice Don.  I was't aware anyone else enjoyed Hak.5 here.  They have a couple nifty little hacksaw tools for usb drives on there.  There is also a really nifty little cleanup version, that auto runs and searches for rootkits, security flaws, and viruses when you plug it into a machine.  Kind of a 'white' version of the other.

As for the google search, you could write a little batch file or script to suck the browser history files, and perhaps agregate it to those containing the google domain.

Well I abandoned my autorun in favor of this U3 drive and I have yet another problem. I am currently using the "Gonzor" payload which uses a VB script containing "Wscript.shell". This presents a problem as Good ol Norton sees it as malicious code. I have tinkered with it as much as possible and it would seem that the VBS is necessary for the program to work.

What im wondering is
A] Would other anti-virus programs such as AVG or Katspertskys(SP) see this as malicious code. I think my school might be on macafee.

and

B] Is there any way to show norton that it is safe without having to go in and turn off script blocker.

I cant see it looking good to my teacher when I try to show him my tool and  an anti-virus comes up, saying im trying to kill the computer.