Skip to content

A badUSB script that gains full admin access to a windows machine from the login screen.

Notifications You must be signed in to change notification settings

TzurSoffer/WindowsPasswordBypasser

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

18 Commits
 
 
 
 
 
 
 
 

Repository files navigation

Disclaimer

This script is provided "as is" without any warranty of any kind, either express or implied. The use of this script is at your own risk. The author is not responsible for any damage or loss of data that may occur as a result of using this script. By using this script, you agree to these terms.

If you found this repository useful, please give it a ⭐!.

Showcase

Watch showcase video on youtube

Installation:

  1. For hac5 rubberDucky: simply install the payload.txt onto the badUSB.
  2. For RPI-pico: install the pico ducky and then replace the content of the payload.dd with the content of the payload.txt
  3. For Arduino-based badUSBs: use the Arduino ide to compile and upload the payload.ino file onto the badUSB

About:

A badUSB script that gains full admin access to a windows machine from the login screen.

How it works:

  1. It reboots into safe mode
  2. It opens a cmd from safe mode
  3. It changes the Utilman.exe to be a cmd.exe
  4. It boots back into windows
  5. It opens the help menu which has been replaced with a cmd instance
  6. It creates a new admin account named rubberDucky with the password 1234
  7. It logs into the new account

About

A badUSB script that gains full admin access to a windows machine from the login screen.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages