b4ba / my-flipper-shits

Free and open source BadUSB payloads for Flipper Zero. [Windows, GNU/Linux, iOS]

My Flipper Shits

• Disclaimer
• PlugAndPlay (PAP) Legend
• Stats
• Payloads
• Videos
• FAQs
• Credits
• Donations

Disclaimer

PlugAndPlay (PAP) Legend

• 🟢 Totally - You must do nothing
• 🟡 Partial - Just something like a Dropbox Token or Discord Webhook...
• 🔴 Manual effort request

Stats

Type	Count
	29
	44
	4
	0 Buy me a Mac :-)
Tot	77
Hak5	41

Payloads

System	Category	Name	PAP
	Credentials	WiFi Windows Passwords	🟡
	Credentials	Defend Yourself From CVE-2023-23397	🟢
	Exfiltration	Exfiltrate Windows Product Key	🟡
	Exfiltration	Exfiltrate Process Info - Windows	🟡
	Exfiltration	ProtonVPN config	🟡
	Exfiltration	Windows netstat	🔴
	Exfiltration	Exfiltrate Computer Screenshots	🟡
	Exfiltration	Export Cookies From Firefox	🟡
	Exfiltration	Exports all the links of the downloads	🟡
	Exfiltration	Tree structure of the operating system	🟡
	Exfiltration	Export all saved certificates with Adobe Reader	🟡
	Exfiltration	Exfiltrates the entire database of the Notion client	🟡
	Exfiltration	Create And Exfiltrate A Webhook Of Discord	🟡
	Exfiltration	Exfiltrate Process Info - Linux	🟡
	Exfiltration	Exfiltrate Network Traffic	🟡
	Exfiltration	Exfiltrate Linux Documents	🟡
	Exfiltration	Exfiltrate Linux Logs	🟡
	Exfiltration	Exfiltrate Network Configuration	🟡
	Exfiltration	Exfiltrate Email And Password By Phising	🟡
	Exfiltration	Exfiltrate Sudo Password By Phishing	🟡
	Exfiltration	Exfiltrate WiFi Passwords	🟡
	Exfiltration	Exfiltrate Photos Through Shell	🟡
	Phising	Standard Phishing Attack	🟡
	Phising	Standard Phishing Payload Using kdialog	🟡
	Execution	Set An Arbitrary And Persistent Tor Circuit	🟡
	Execution	Set An Arbitrary And Persistent Tor Circuit	🟡
	Execution	Set Tor Bridge	🟡
	Execution	Exploiting An Executable File	🟢
	Execution	Change MAC Address	🟡
	Execution	Set Arbitrary VPN	🟡
	Execution	Close All Applications	🟢
	Execution	Change Network Configuration	🟡
	Execution	Edit The Default Real App With An Arbitrary	🟡
	Execution	Uninstall Signal	🟢
	Execution	Set An Arbitrary DNS - IPv4 version	🟢
	Execution	Add An Excepiton To Avast Antivirus	🟢
	Execution	Make Windows performant (but ugly and boring)	🟢
	Execution	Change Windows User Name	🟡
	Execution	Starting a PowerShell with administrator permissions in Windows	🟢
	Execution	Change the password of the Windows user	🟡
	Execution	Stop A Single Process In Windows	🟡
	Execution	Uninstall A Specific App On Windows Through Control Panel	🟡
	Execution	Persistent Reverse Shell - Telegram Based	🟡
	Execution	Telegram Persistent Connection Linux	🟡
	Execution	Persistent Keylogger - Telegram Based	🟡
	Execution	Change Git Remote Link	🟡
	Execution	Change Git Remote Link	🟡
	Execution	Send Messages In Discord Channel-Server	🟡
	Execution	Install And Run Any Arbitrary Executable - No Internet And Root Needed	🟡
	Execution	Defend yourself against AtlasVPN bugdoor	🟡
KDE	Prank	Change Desktop Wallpaper	🟡
	Prank	Send Signal Messages	🟡
	Prank	Send Microsoft Teams Messages	🟡
	Prank	Never Gonna Give You Up	🟢
	Prank	Send Telegram Messages	🟡
	Prank	Change The App That Will Be Runned	🟡
	Prank	Alien Message From Computer	🟢
	Prank	Continuous Print In Terminal	🟢
	Prank	Change Wallpaper With Screenshot	🟡
	Prank	Play A Song Through Spotify	🟢
	Prank	Full-Screen Banner Joke	🟢
	Prank	The Mouse Moves By Itself	🟡
	Prank	Try To Catch Me	🟡
	Prank	Follow Someone On Instagram	🟡
	Prank	Pranh(ex)	🟢
	Prank	Send Email Through Thunderbird	🟢
	Prank	Send Email Through Thunderbird	🟢
	Prank	Change Github Profile Settings	🟡
	Prank	Play A Song With An iPhone	🟡
	Prank	Call Someone With An iPhone	🟡
	Prank	Edit A Reminder With An iPhone	🟡
	Prank	Delete A Reminder With An iPhone	🟡
	Indicent Response	Auto-Check Cisco IOS XE Backdoor based on CVE-2023-20198 and CVE-2023-20273	🔴
	Indicent Response	Exploit Citrix NetScaler ADC and Gateway through CVE-2023-4966	🔴
	Indicent Response	Exploit Citrix NetScaler ADC and Gateway through CVE-2023-4966	🔴
	Incident Response	Defend yourself against CVE-2023-36884 Office and Windows HTML Remote Code Execution Vulnerability	🟢
//	Prank	Flipper Zero GIF	🟢

FAQs

• DEFINE doesn't work!
  • DEFINEs in FlipperZero probably doesn't work, if they give you an error just remove them by directly entering what you want in the appropriate place
• REM errors
  • If you have an error on a REM line make sure it is not a blank line. In any case, REMs are comments and can be deleted so try deleting the line that gives you an error to see if it fixes the problem.
• In the Rick Roll video prank it's calling for a bit.ly and seems to go to a github 404 page
  • Solution - bit.ly link broken - 404 problems
• I dont understand how to put a .py link in a .txt can you help me please?
  • Solution - How to insert a link to an external resource and why?

Credits

Aleff

Github

Linkedin