/Flipper-BadUSB

Free and libre source BadUSB payloads for Flipper Zero. [Windows, GNU/Linux, iOS]

Primary LanguageHTML

In progress. Fix all the links or add a preset (e.g. change password to 'password')

I left my discord bot in here, change before use it.

======original stuff below=======

My Flipper Shits

Hits Licence

Disclaimer


PlugAndPlay (PAP) Legend

  • 🟢 Totally - You must do nothing
  • 🟡 Partial - Just something like a Dropbox Token or Discord Webhook...
  • 🔴 Manual effort request

Stats

Type Count
Linux 30
Windows 46
iOS 4
macOS 0 (Buy me a Mac ^^)
Tot 80
Hak5 Payload accepted 111
Hak5 Payload Awarded 2

Payloads

System Category Name PAP
Windows Credentials WiFi Windows Passwords 🟡
Windows Credentials Defend Yourself From CVE-2023-23397 🟢
Windows Exfiltration Exfiltrate Windows Product Key 🟡
Windows Exfiltration Exfiltrate Process Info - Windows 🟡
Windows Exfiltration ProtonVPN config 🟡
Windows Exfiltration Windows netstat 🔴
Windows Exfiltration Exfiltrate Computer Screenshots 🟡
Windows Exfiltration Export Cookies From Firefox 🟡
Windows Exfiltration Exports all the links of the downloads 🟡
Windows Exfiltration Tree structure of the operating system 🟡
Windows Exfiltration Export all saved certificates with Adobe Reader 🟡
Windows Exfiltration Exfiltrates the entire database of the Notion client 🟡
Windows Exfiltration Create And Exfiltrate A Webhook Of Discord 🟡
Linux Exfiltration Exfiltrate Process Info - Linux 🟡
Linux Exfiltration Exfiltrate Network Traffic 🟡
Linux Exfiltration Exfiltrate Linux Documents 🟡
Linux Exfiltration Exfiltrate Linux Logs 🟡
Linux Exfiltration Exfiltrate Network Configuration 🟡
Linux Exfiltration Exfiltrate Email And Password By Phising 🟡
Linux Exfiltration Exfiltrate Sudo Password By Phishing 🟡
Linux Exfiltration Exfiltrate WiFi Passwords 🟡
Linux Exfiltration Exfiltrate Photos Through Shell 🟡
Windows Exfiltration Save Your Thunderbird Settings 🟡
Linux Phising Standard Phishing Attack 🟡
Linux Phising Standard Phishing Payload Using kdialog 🟡
Linux Execution Set An Arbitrary And Persistent Tor Circuit 🟡
Windows Execution Set An Arbitrary And Persistent Tor Circuit 🟡
Windows Execution Set Tor Bridge 🟡
Linux Execution Exploiting An Executable File 🟢
Linux Execution Change MAC Address 🟡
Linux Execution Set Arbitrary VPN 🟡
Windows Execution Close All Applications 🟢
Linux Execution Change Network Configuration 🟡
Linux Execution Edit The Default Real App With An Arbitrary 🟡
Windows Execution Uninstall Signal 🟢
Windows Execution Set An Arbitrary DNS - IPv4 version 🟢
Windows Execution Add An Excepiton To Avast Antivirus 🟢
Windows Execution Make Windows performant (but ugly and boring) 🟢
Windows Execution Change Windows User Name 🟡
Windows Execution Starting a PowerShell with administrator permissions in Windows 🟢
Windows Execution Change the password of the Windows user 🟡
Windows Execution Stop A Single Process In Windows 🟡
Windows Execution Uninstall A Specific App On Windows Through Control Panel 🟡
Linux Execution Persistent Reverse Shell - Telegram Based 🟡
Linux Execution Telegram Persistent Connection Linux 🟡
Linux Execution Persistent Keylogger - Telegram Based 🟡
Linux Execution Change Git Remote Link 🟡
Windows Execution Change Git Remote Link 🟡
Windows Execution Send Messages In Discord Channel-Server 🟡
Windows Execution Install And Run Any Arbitrary Executable - No Internet And Root Needed 🟡
Linux Execution Defend yourself against AtlasVPN bugdoor 🟡
LinuxKDE Prank Change Desktop Wallpaper 🟡
Windows Prank Send Signal Messages 🟡
Windows Prank Send Microsoft Teams Messages 🟡
Windows Prank Never Gonna Give You Up 🟢
Linux Prank Send Telegram Messages 🟡
Linux Prank Change The App That Will Be Runned 🟡
Windows Prank Alien Message From Computer 🟢
Windows Prank Continuous Print In Terminal 🟢
Windows Prank Change Wallpaper With Screenshot 🟡
Windows Prank Play A Song Through Spotify 🟢
Windows Prank Full-Screen Banner Joke 🟢
Windows Prank The Mouse Moves By Itself 🟡
Windows Prank Try To Catch Me 🟡
Windows Prank Follow Someone On Instagram 🟡
Windows Prank Pranh(ex) 🟢
Windows Prank Send Email Through Thunderbird 🟢
Linux Prank Send Email Through Thunderbird 🟢
Windows Prank Change Github Profile Settings 🟡
iOS Prank Play A Song With An iPhone 🟡
iOS Prank Call Someone With An iPhone 🟡
iOS Prank Edit A Reminder With An iPhone 🟡
iOS Prank Delete A Reminder With An iPhone 🟡
Linux Prank Kali Linux - This_damn_shell_doesn_t_work... so_sad! 🟢
Linux Prank Linux - This_damn_shell_doesn_t_work... so_sad! 🟢
Windows Prank Prank In The Middle - Thunderbird 🟢
Linux Indicent Response Auto-Check Cisco IOS XE Backdoor based on CVE-2023-20198 and CVE-2023-20273 🔴
Linux Indicent Response Exploit Citrix NetScaler ADC and Gateway through CVE-2023-4966 🔴
Windows Indicent Response Exploit Citrix NetScaler ADC and Gateway through CVE-2023-4966 🔴
Windows Incident Response Defend yourself against CVE-2023-36884 Office and Windows HTML Remote Code Execution Vulnerability 🟢
// Prank Flipper Zero GIF 🟢

FAQs

  • DEFINE doesn't work!
    • DEFINEs in FlipperZero probably doesn't work, if they give you an error just remove them by directly entering what you want in the appropriate place
  • REM errors
    • If you have an error on a REM line make sure it is not a blank line. In any case, REMs are comments and can be deleted so try deleting the line that gives you an error to see if it fixes the problem.
  • In the Rick Roll video prank it's calling for a bit.ly and seems to go to a github 404 page
    • Solution - bit.ly link broken - 404 problems
  • I dont understand how to put a .py link in a .txt can you help me please?
    • Solution - How to insert a link to an external resource and why?

Some Boring Considerations

This is my pay after over 1 year and 3 months of work.

On January 4, 2023, after treating myself to the Flipper Zero for Christmas, I began publishing scripts in DuckyScript on the GitHub repository 'my-flipper-shits'.

I've always considered it normal and right to publish the source code I developed because I find it absurd to cover it with a copyright license, and for this reason, I decided to make it available under the copyleft GPLv3 license.

After a few months, I started to see that some people were staring the repository, then the first forks appeared, and finally, I decided to tidy it up a bit and make it more usable with a much nicer README.md.

Someone wrote to me on Discord, others sent me an email, but whenever they reported problems, I always tried to help them, not always succeeding, but always trying. So I added FAQs to the homepage.

After:

  • 80 payloads uploaded for GNU/Linux, Windows, and iOS.
  • Over 252,000 views.
  • 771 Stars
  • 55 Forks
  • 19 watching

… this is the first completely spontaneous 'thank you' (without providing assistance) I've received in over 1 year of activity.

Activity open to anyone and making everything I did available under GPLv3, all without ever asking for a single euro. For free. My intention with these publications is to disseminate, within the limits of my knowledge, as much as I can to anyone without making any distinctions, so that knowledge can be freely and librement available to anyone.

And it is precisely for this reason that I consider this spontaneous thanks from a completely unknown person my pay.

Developing libre source code is important, and I hope this message is clear.

Credits

Aleff


Github


LinkedIn