Coder Social home page Coder Social logo

badusb's Introduction

BadUSB Scripts


All of these scripts are for educational purposes only and not intended to be used for any malicious purposes. This is to act as a library showcasing my progress more than anything. If someone is to use any of these scripts, it is essential to have prior consent from all parties involved. Many of these scripts I have created have been improved upon using ai programs. I will not be held responsible for any actions taken using any of the scripts, techniques or tools mentioned below:

VulnerabilityScanner:

This is a script intended to be ran by a flipper zero, utilizing a secondary USB for all results to be saved onto. This script will scan for vulnerabilities by the means of checking for outdated software, open ports, firewall and antivirus statuses, smbv1 status, network services, password and audit policies, and more. Then, this script will check for any CVEs that could be found and will save a results.txt file on the secondary USB in a folder with the PC name of the target machine being scanned. Logs will will also be saved onto that USB for further analysis if necessary.

CredentialHarvester:

This is a script to be ran by the flipper zero, requiring a secondary USB. Name the secondary USB "MYUSB" and then plug it into the target windows machine. Then, the flipper is to be plugged in and the CredentialHarvester.txt script is to be ran. This script will take all of the credentials stored onto browsers such as Chrome, Firefox, and Edge- copying them onto the usb that is labeled MYUSB. Many of the files will either be encoded or encrypted, so due diligence is necessary when running this script (or any other script).

RansomwareSimulation:

This script simulates a ransomware attack. Run this script by plugging in the flipper zero and running the ransomwaresimulation script. This changes all file extensions in specified directories to ".locked", preventing the use of them. This also disables task manager (requiring admin privileges) as well as displays a pop up referring to the simulated ransomware attack that has been modified to make it hard to close out off. You can revert all changes made by this script by running the RansomwareSimulationCleanup script. This is not a real ransomware attack, and is intended to be a simulation for educational purposes.

RansomwareSimulationCleanup:

This script is fairly self explanatory. It is a cleanup script to revert all changes made by the RansomwareSimulation script mentioned above. This should be ran after the RansomwareSimulation script to rename all file extensions back to their original names. If not all .locked files are reverted, run this script once more to confirm all changess and revert the extensions back to their original state.

EmailSender:

This script is also fairly self explanatory. It opens up chrome and navigates to gmail (the account must be logged in), and then composes an email and sends it to a destination that you choose. You must actually type the email address and contents onto the script before this can be used. You can use this to automate emails. You can copy and paste the same script over and over in the same .txt file to send it to many emails at once. You can also use python if you have a massive amount of email addresses/names to automate this further. I can provide a python script for this if I get enough requests. Enjoy.

EmailScriptGenerator.py:

This is a python script to automatically create BadUSB scripts to auto send emails. This is similar to the EmailSender badUSB script, except this auto generates many emailsender badusb scripts to change emails and names based on an excel sheet with this information. This takes a excel sheet with the columns named "Names" and "Emails" and will then make a badusb script using the name + email of each person. There are various subject options that will be chosen from, to minimize "spam" detection if possible. If you want to keep the same subject for all emails, just paste the same thing to all 7 subject placeholders. Change the contents of the email to what you want to send and the signature to your name. This can be very useful in a business setting.

badusb's People

Contributors

markcyber avatar

Stargazers

 avatar  avatar  avatar  avatar

Watchers

 avatar

Forkers

andassis

badusb's Issues

Collaboration oppurtunity

Hi Mark,

I'm Greg and I'm representing the Hakin9 company. Hakin9 is a company offering e-books and courses on IT security topics. You can check our courses online https://hakin9.org/online-courses-2/.

We are currently developing our new product: 40 steps where during a 4 hour live webinar an instructor will be presenting a specific skill in 40 steps. As an example our last live webinar was on building the PenTestLab environment for docker.

Our team was impressed by your contribution to BadUSB Scripts For FlipperZero and we would love you to partner with us in conducting such webinar on topic around FlipperZero.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.