My Flipper Shits

• Disclaimer
• PlugAndPlay (PAP) Legend
• Stats
• Top Payload Contributors
• Payloads
• FAQs
• Some Boring Considerations
• Credits

Disclaimer

PlugAndPlay (PAP) Legend

• 🟢 Totally - You must do nothing
• 🟡 Partial - Just something like a Dropbox Token or Discord Webhook...
• 🔴 Manual effort request

Stats

Type	Count
	30
	51
	5
	1
Tot	87
Community contributions	5
Hak5 Payload accepted	115
Hak5 Payload Awarded	2

Top Payload Contributors

Contribute to the repository by publishing your payloads to climb the rankings

Rank	Contributor	Payloads Published
🥇 1st	bst04	3
🥈 2nd	NexusWannaBe	2
🥉 3rd	maybe you...	0

Payloads

System	Category	Name	PAP
	Credentials	WiFi Windows Passwords	🟡
	Credentials	Defend Yourself From CVE-2023-23397	🟢
	Exfiltration	Exfiltrate Windows Product Key	🟡
	Exfiltration	Exfiltrate Process Info - Windows	🟡
	Exfiltration	ProtonVPN config	🟡
	Exfiltration	Windows netstat	🔴
	Exfiltration	Exfiltrate Computer Screenshots	🟡
	Exfiltration	Export Cookies From Firefox	🟡
	Exfiltration	Exports all the links of the downloads	🟡
	Exfiltration	Tree structure of the operating system	🟡
	Exfiltration	Export all saved certificates with Adobe Reader	🟡
	Exfiltration	Exfiltrates the entire database of the Notion client	🟡
	Exfiltration	Create And Exfiltrate A Webhook Of Discord	🟡
	Exfiltration	Exfiltrate Process Info - Linux	🟡
	Exfiltration	Exfiltrate Network Traffic	🟡
	Exfiltration	Exfiltrate Linux Documents	🟡
	Exfiltration	Exfiltrate Linux Logs	🟡
	Exfiltration	Exfiltrate Network Configuration	🟡
	Exfiltration	Exfiltrate Email And Password By Phising	🟡
	Exfiltration	Exfiltrate Sudo Password By Phishing	🟡
	Exfiltration	Exfiltrate WiFi Passwords	🟡
	Exfiltration	Exfiltrate Photos Through Shell	🟡
	Exfiltration	Save Your Thunderbird Settings	🟡
	Phising	Standard Phishing Attack	🟡
	Phising	Standard Phishing Payload Using kdialog	🟡
	Execution	Install Official VSCode Extension	🟢
	Execution	Install Any Arbitrary VSCode Extension	🟡
	Execution	Set An Arbitrary And Persistent Tor Circuit	🟡
	Execution	Set An Arbitrary And Persistent Tor Circuit	🟡
	Execution	Set Tor Bridge	🟡
	Execution	Exploiting An Executable File	🟢
	Execution	Change MAC Address	🟡
	Execution	Set Arbitrary VPN	🟡
	Execution	Close All Applications	🟢
	Execution	Change Network Configuration	🟡
	Execution	Edit The Default Real App With An Arbitrary	🟡
	Execution	Uninstall Signal	🟢
	Execution	Set An Arbitrary DNS - IPv4 version	🟢
	Execution	Add An Excepiton To Avast Antivirus	🟢
	Execution	Make Windows performant (but ugly and boring)	🟢
	Execution	Change Windows User Name	🟡
	Execution	Starting a PowerShell with administrator permissions in Windows	🟢
	Execution	Change the password of the Windows user	🟡
	Execution	Stop A Single Process In Windows	🟡
	Execution	Uninstall A Specific App On Windows Through Control Panel	🟡
	Execution	Persistent Reverse Shell - Telegram Based	🟡
	Execution	Telegram Persistent Connection Linux	🟡
	Execution	Persistent Keylogger - Telegram Based	🟡
	Execution	Change Git Remote Link	🟡
	Execution	Change Git Remote Link	🟡
	Execution	Send Messages In Discord Channel-Server	🟡
	Execution	Install And Run Any Arbitrary Executable - No Internet And Root Needed	🟡
	Execution	Defend yourself against AtlasVPN bugdoor	🟡
	Execution	Shutdown After 1 Minute - By NexusWannaBe	🟢
	Execution	Immediate Shutdown - By NexusWannaBe	🟢
	Execution	IPLogger - Discord Webhook - by bst04	🟡
	Prank	Text Someone Message With iPhone - by bst04	🟡
KDE	Prank	Change Desktop Wallpaper	🟡
	Prank	Send Signal Messages	🟡
	Prank	Send Microsoft Teams Messages	🟡
	Prank	Never Gonna Give You Up	🟢
	Prank	Send Telegram Messages	🟡
	Prank	Change The App That Will Be Runned	🟡
	Prank	Alien Message From Computer	🟢
	Prank	Continuous Print In Terminal	🟢
	Prank	Change Wallpaper With Screenshot	🟡
	Prank	Play A Song Through Spotify	🟢
	Prank	Full-Screen Banner Joke	🟢
	Prank	The Mouse Moves By Itself	🟡
	Prank	Try To Catch Me	🟡
	Prank	Follow Someone On Instagram	🟡
	Prank	Pranh(ex)	🟢
	Prank	Send Email Through Thunderbird	🟢
	Prank	Send Email Through Thunderbird	🟢
	Prank	Change Github Profile Settings	🟡
	Prank	Play A Song With An iPhone	🟡
	Prank	Call Someone With An iPhone	🟡
	Prank	Edit A Reminder With An iPhone	🟡
	Prank	Delete A Reminder With An iPhone	🟡
	Prank	Kali Linux - This_damn_shell_doesn_t_work... so_sad!	🟢
	Prank	Linux - This_damn_shell_doesn_t_work... so_sad!	🟢
	Prank	Prank In The Middle - Thunderbird	🟢
	Prank	Spam Terminals - by bst04	🟢
	Indicent Response	Auto-Check Cisco IOS XE Backdoor based on CVE-2023-20198 and CVE-2023-20273	🔴
	Indicent Response	Exploit Citrix NetScaler ADC and Gateway through CVE-2023-4966	🔴
	Indicent Response	Exploit Citrix NetScaler ADC and Gateway through CVE-2023-4966	🔴
	Incident Response	Defend yourself against CVE-2023-36884 Office and Windows HTML Remote Code Execution Vulnerability	🟢
//	Prank	Flipper Zero GIF	🟢

FAQs

• DEFINE doesn't work!
  • DEFINEs in FlipperZero probably doesn't work, if they give you an error just remove them by directly entering what you want in the appropriate place
• REM errors
  • If you have an error on a REM line make sure it is not a blank line. In any case, REMs are comments and can be deleted so try deleting the line that gives you an error to see if it fixes the problem.
• In the Rick Roll video prank it's calling for a bit.ly and seems to go to a github 404 page
  • Solution - bit.ly link broken - 404 problems
• I dont understand how to put a .py link in a .txt can you help me please?
  • Solution - How to insert a link to an external resource and why?
• Why you should absolutely not use permanent links maintained by others.
  • Read the discussion born from a Pull Request

Where They Talk About This Repository

• CVE Feed
• CSDN(Chinese Software Developer Network)/Full Article (Special Thanks!)
• CSDN in-List
• Infosec Writeups
• SOS-Intelligence
• Intelligence
• Achirou
• Awesome Open Source - The Top 23 Flipperzero Open Source Projects
• Decryptology
• Gitters/Hak5
• Christan Workshop
• Twitter/HAHWUL
• Popdocs

Some Boring Considerations

This is my pay after over 1 year and 3 months of work.

On January 4, 2023, after treating myself to the Flipper Zero for Christmas, I began publishing scripts in DuckyScript on the GitHub repository 'my-flipper-shits'.

I've always considered it normal and right to publish the source code I developed because I find it absurd to cover it with a copyright license, and for this reason, I decided to make it available under the copyleft GPLv3 license.

After a few months, I started to see that some people were staring the repository, then the first forks appeared, and finally, I decided to tidy it up a bit and make it more usable with a much nicer README.md.

Someone wrote to me on Discord, others sent me an email, but whenever they reported problems, I always tried to help them, not always succeeding, but always trying. So I added FAQs to the homepage.

After:

• 80 payloads uploaded for GNU/Linux, Windows, and iOS.
• Over 252,000 views.
• 771 Stars
• 55 Forks
• 19 watching

… this is the first completely spontaneous 'thank you' (without providing assistance) I've received in over 1 year of activity.

Activity open to anyone and making everything I did available under GPLv3, all without ever asking for a single euro. For free. My intention with these publications is to disseminate, within the limits of my knowledge, as much as I can to anyone without making any distinctions, so that knowledge can be freely and librement available to anyone.

And it is precisely for this reason that I consider this spontaneous thanks from a completely unknown person my pay.

Developing libre source code is important, and I hope this message is clear.

Credits

Aleff

Github

LinkedIn

• GitHub: https://github.com/aleff-github
• Linkedin: https://www.linkedin.com/in/alessandro-greco-aka-aleff/