Security and Hacking Plugins for Bart's PE Builder

        As many of you know, Bart's PE builder allows you to create a Windows XP/2003 boot CD that you can use to run Windows tools and rescue systems that won't boot. It's greatest advantage is that it allows complete read/write access to NTFS drives. While most of the best security tools are written for *nix there are a few Windows tools that are nice to have. I've constructed this webpage to PE Builder plugins that I have either created or modified. Check out http://www.911cd.net/forums/ for more useful plugins.

Brutus-AE2	Bruteforce tool for remote cracking.
Cain 4.2	Sniffer and Cracker Plugin created by Wolfgang Brinkmann aka Manfred Meierbier  rev  0.07,  implemented changes by Ghostrider, thanks for making this work 1.2 Lots of little changes by Irongeek and Dirk  Loss
CHNTPW (Change NT Passwords)	Offline NT password changer by Petter Nordahl-Hagen. This plugin let's you change or blank local account passwords, even if the machine is part of a domain. Your best bet it to just use the "*" option to blank passwords since changing them seems flaky on my XP SP1 box but blanking works fine. Download source from http://home.eunet.no/~pnordahl/ntpasswd/ . This program was compiled by Adrian Crenshaw using the Cygwin environment.  I take no reasonability if it fucks up anyone's system, but it seems to work for me .
Ghost 11	The hard drive imaging part of the Symantec Ghost Solution Suite 2.0.1.
HiJackThis	HiJackThis is one of the best tools out there for finding and removing spyware. My plugin opens a window to http://hijackthis.de/ so you can analyze your log. This plugin requires Paraglider's RunScanner Plugin to work properly.
Look@Lan	Look@Lan is a very powerful network monitoring tool which scans and monitors your LAN. Plugin by bembel with small changes by Irongeek
MSConfig	MSConfig is a tool that comes along with Windows XP and allows you to turn off things that automatically start up when someone logs in (like some spyware). I know my plugin works with XPE since it copies MSConfig onto the CD for you, I'm not sure if it will work with just NU2Menu. This plugin requires Paraglider's RunScanner Plugin to work properly.
Softperfect's Netscan	Netscan is a great tool for finding rogue file shares.
z_xpe-custom.inf	To the left is the z_xpe-custom.inf for use with my Bart's PE Builder Tutorial

Printable version of this article