Create Bootable Tech Tools USB

[AtYourService]

This will be an ongoing tutorial for us on how to create a multi-boot USB that will allow you to boot from your favorite live cd , so far I have it working with ophcrack,hirens 10.0,memtest bactrack4, nt pass reset and konboot. Im still learning alot of stuff so bear with me. These bootable usbs are perfect for tech because we dont have to lug around 30 different cds to job sites. and is better to combat viruses and bootkits because you dont have to worry about them being hidden when the system is running live

To start off you will need a usb thumbdrive , im using an 8gb no-name ebay usb drive that i probably got for like $20 2 years ago on ebay.

to start off plug in the usb drive, and type "diskpart" in the run box:

everything in red is what you will type, (we are going to create a single main partition but you can make more if you want. after creating the parittion we will format it fat32)


------------------------------------------------------------------------------------
Microsoft DiskPart version 6.1.7100
Copyright (C) 1999-2008 Microsoft Corporation.
On computer: SCORPION7

DISKPART> list disk

Disk ### Status Size Free Dyn Gpt
-------- ------------- ------- ------- --- ---
Disk 0 Online 186 GB 1024 KB
Disk 1 Online 74 GB 6144 KB
Disk 2 No Media 0 B 0 B
Disk 3 Online 7900 MB 0 B <--this is my 8gb usb drive

DISKPART> select disk 3

Disk 3 is now the selected disk.

DISKPART> clean

DiskPart succeeded in cleaning the disk.

DISKPART> create partition primary

DiskPart succeeded in creating the specified partition.

DISKPART> list partition

Partition ### Type Size Offset
------------- ---------------- ------- -------
* Partition 1 Primary 7899 MB 1024 KB

DISKPART> select partition 1

Partition 1 is now the selected partition.

DISKPART> active

DiskPart marked the current partition as active.

DISKPART> format fs=fat32 quick

100 percent completed

DiskPart successfully formatted the volume.

------------------------------------------------------------------------------------

#################XP USERS READ HERE #############################
XP doenst let you use diskpart on usb drives so the work around is to download
http://gocoding.com/page.php?al=petousb
run the PeToUSB executable, select the drive, check Enable Disk Format, Quick Format and Force Volume Dismount and click Start.
#############################################################


now that the drive is finished we need to get grub4dos http://sourceforge.net/projects/grub4dos/files/
download grub4dos-0.4.4.zip, we only need the file called "grldr" from the zip , extract it to your usb drive

download grubinst http://sourceforge.net/projects/grub4dos/files/
grubinst_1.0.1_bin_win.zip

open grubinst_gui.exe and choose your usb drive under device name (it should be the same number as the disk you created the parittion on, i.e. disk 3 would be hd3) then click install button
this will install the grub mbr to your usb drive

then create an empty file in the root of your thumbdrive called menu.lst

if you made it this far, your usb drive should now be bootable :mrgreen:


now for the fun stuff

first we're going to add memtest
#########################MEMTEST################
download memtest86 http://www.memtest86.com/memtest86-3.5.iso.zip
extract to folder in root of thumbdrive called "memtest" and extract the "ISOLINUX" folder from the .iso and put it in the memtest folder (7-zip works great for extracting from .isos)

Now Edit menu.lst

title Memtest86
kernel /memtest86/ISOLINUX/MEMTEST

and save

now test your drive, plug it in a machine and bootup you should be presented with the grub menu and it should allow you to choose and run memtest


#########################NTPASSWD################

First download ntpasspwd http://home.eunet.no/pnordahl/ntpasswd/cd080802.zip
create a folder called "ntpasswd" in the root of your thumbdrive
extract the contents of the .iso into that folder

then edit menu.lst and add the following line below the memtest line

title Nt Password Reset
kernel /ntpasswd/vmlinuz rw vga=1 initrd=/ntpasswd/initrd.cgz /ntpasswd/scsi.cgz
initrd /ntpasswd/initrd.cgz

#########################KONBOOT################
http://www.piotrbania.com/all/kon-boot/data/FD0-konboot-v1.1-2in1.zip
create a folder called "boot" in the root of thumbdrive then a folder called "floppy"
then extract FD0-konboot-v1.1-2in1.img to floppy folder

add this to menu.lst

title Kon-Boot-test
map --mem /boot/floppy/FD0-konboot-v1.1-2in1.img (fd0)
map --hook
chainloader (fd0)+1
map (hd1) (hd0)
map --hook
rootnoverify (fd0)

#########################Spinrite 6################
this is a paid app so if you got it, use it
create a folder called "boot" in the root of thumbdrive then a folder called "floppy"
then extract "SpinRite.ima" to floppy folder

add this to menu.lst

title GRC SpinRite 6
kernel /memdisk
initrd /boot/floppy/SpinRite.ima

more to come!!!!

 

[LunchBox]

Nice, job I always loose my patience when wanting to learn/create my own custom USB.

Right now I use UBCD4Win and original UBCD and I use the tool provided to burn it to my USB. It works fantastic.

I've been trying to get WinPE but I can't get a clean copy (they all seem to have a nasty virus) My only copy is beyong repair.

If you know a good source let me know.

 

[Jory]

This is pretty interesting. I might have to try it out.

 

[AtYourService]

successfully tried this on my sd card

whats great about this sd card is that its a usb/sd card in one, and it also has a write protect switch so along with being bootable , now i can put my tech toolkit http://www.whatsmypass.com/tech-toolkit-10 on it without fear of a virus will corrupt the files when i plug it in. even though this one is 1gb its large enough to hold my tech tool,konboot,ntpasswd, & hirens

 

[reesk92]

hmmmmmmmm i thought i had saw something similar to this and your back ground proves it to me you saw it on hak 5 like i did nice...

they called it a usb multi pass which sounds cooler

 

[AtYourService]

yep i scour many security sites on new emerging viruses backdoors and exploits
I've been making single bootable usbs for work but multi made it even better
i started looking for a way after seeing the sardu multi av usb creator

 

[0gr3]

AYS where did you get that USB/SD card? I have checked out my local hardware shops and no one carries them.

 

[Newbie]

Just did a google search with the jpg name and found this on amazon

http://www.amazon.com/Sandisk-SDSDP.../B0009HTB0Y/ref=pd_cp_e_2/183-7524497-5579133

1GB priced @ 12.99

Edit:

Even Better. http://www.amazon.com/SanDisk-SDSDPH-004G-A11-15MB-Ultra-Plus/dp/B000UZJ0O2/ref=pd_bxgy_e_text_b

SanDisk SDSDPH-004G-A11 4GB/15MB Ultra II SD Plus Card @ 30.04

 

[eric76]

Very nice job. Thanks for taking the time to do this tutorial.

 

[BryanLee]

Pretty nifty...just ordered a 16gb thumb drive. My old 2gb just wasn't cutting it anymore. Looking forward to consolidating some cd's onto usb. Thanks for the nice post!

 

[vetman35]

Imation sells USB Flash drives with Write Protect switches on the Clip and Swivel models. The clip is recessed and difficult to change, but it is nice that I cannot accidentally bump it and unlock the key. The swivel has a standard easy access external switch.

http://www.imation.com/en-us/Imation-Products/USB-Flash-Drives--Accessories/Swivel-Flash-Drive/

http://www.imation.com/en-us/Imation-Products/USB-Flash-Drives--Accessories/Clip-Flash-Drive/

 

[Zeri]

I have had 3 of the Imation drives die on me and the switch moves too easily on the SD cards I have tried. I have had the best luck with the Kanguru Flashblu II. I have 10 of these I pass around and have never had a problem with them.

 

[TriadPCSolutions]

Dr. Web

Currious, has anyone here found a way to get a dr web live cd, I've tried using grub to have it boot from the iso, I first had to use wincontig to defrag the individual iso file, which allowed it to boot, but it freezes up half way saying "insert the cd". Curious if anyone has found a way to work this.

 

[Methical]

@AYS

I haven't managed to try this one out yet. I'll have to go pick up a drive tomorrow and try it out. Although your method is pretty straight forward; i noticed a few parts that weren't in 'red' in the 'diskpart' section at the top of the tutorial. Any luck with getting any others to boot ?

 

[kagman]

I use a USB thumb drive and I have all my tools on it. Most of them i have gotten from here and just added them to my library on the thumb drive. The problem with bootable thumb drives is that not all computers are able to boot from them, but new computers can. Besides most of the tools i use need to be run within windows. lol....

 

[dbdawn]

Have you guys tried SARDU? It is very nice and you can add what you want and don't want. http://www.sarducd.it/

 

[cramped]

any ideas why diskpart wont detect my usb drive that is known good?

 

[cramped]

disregard my last post. I didnt read the xp work around bit

 

[Techs on Deck]

Thanks, it works great!

What is the syntax for menu.lst? I'd like to add a few more images to my drive (Drive Fitness Test, Clonezilla, and maybe a few others).

 

[Techs on Deck]

Ok, I got DFT working with this menu entry:

title Drive Fitness Test
map --mem /boot/floppy/dft.img (fd0)
map --hook
chainloader (fd0)+1
map (hd1) (hd0)
map --hook
rootnoverify (fd0)

I extracted the img from this iso file:
http://www.hitachigst.com/hdd/support/downloads/dft32_v416_b00.iso

I guess all floppy images work with the above syntax? I don't know what any of it means