Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
BadUSB-Files-For-FlipperZero — A Collection of Over 60 Scripts - updated specifically for the BadUSB function on the FlipperZero. | Kitploit
Tools/GitHubGitHub/beigeworm/badusb-files-for-flipperzero
ExploitationData ExfiltrationPost-ExploitationHardware HackingPenetration TestingCommand and ControlRed TeamingPayload Development
GitHub
beigeworm/badusb-files-for-flipperzero

BadUSB-Files-For-FlipperZero

A Collection of Over 60 Scripts - updated specifically for the BadUSB function on the FlipperZero.

View Repository
1.2k16391 month agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Ducky-Script-For-FlipperZero

This repository is a collection of scripts which have been updated specifically For the BadUSB/BadKB function on FlipperZero. They should however work just fine on any device that uses Ducky Script. These scripts range from harmless pranks to nefarious red team tools.

⚠️ Legal & Ethical Notice

This repository is intended solely for education, research, laboratory environments, and authorized security assessments.

The tools and techniques demonstrated here must only be used:

  • In your own lab or testing environment.
  • Against systems you own.
  • Against systems for which you have obtained explicit permission from the owner.

Unauthorized use of these materials against third-party systems is illegal and unethical.

The author does not encourage, condone, or authorize the use of these materials for unlawful purposes. All responsibility for the use or misuse of this repository rests solely with the user.

Use responsibly, follow responsible disclosure practices where applicable, and comply with all local, national, and international laws

These payloads are all for Windows systems

Join The Crew!

Join our Discord server!

IMPORTANT NOTE FOR DISCORD WEBHOOKS!

replace DISCORD_WEBHOOK_HERE with your Discord Webhook Channel and Token ONLY - eg. $dc='1206563651960586035/sNqypsq629XmXpc9TP924Dxeox6qMHDCI5e27qJ3fw4ef34wff4wf_df3aFOY'

This is because Microsoft Defender now blocks any RunPrompt commands containing https:// or -W Hidden and its variations

If you want to learn more about the code, most of these scripts are in powershell format here

https://github.com/beigeworm/Powershell-Tools-and-Toys - Repository of 50+ powewrshell scripts.

https://github.com/beigeworm/PoshGram-C2 - A Telegram C2 client in powrshell.

https://github.com/beigeworm/PoshCord-C2 - A Discord C2 client in powershell.

Pre-Deployment Setup

Most of these scripts will require some setup before they will work. Make sure to read through all the scripts and follow any setup instructions.

Setup for Telegram, Discord, Dropbox

DROPBOX ACCESS TOKEN SETUP

  1. make an app at https://www.dropbox.com/developers/apps (make sure to grant full access to your new app)
  2. generate an access token for your app. (Dropbox access tokens expire after 7 days.)

DISCORD WEBHOOK SETUP

  1. (Server Admin Required) On a discord server chat goto > "edit channel" > "integrations" > "webhooks"
  2. make a new webhook, name it and then click "copy webhook URL".

TELEGRAM TOKEN SETUP

  1. Install Telegram and make an account if you haven't already.
  2. Visit https://t.me/botfather and make a bot. (make a note of the API token)
  3. Click the provided link to open the chat E.G. "t.me/****bot" then type or click /start)
  4. Visit https://github.com/beigeworm/Powershell-Tools-and-Toys/tree/main/Command-and-Control for more info

Notes

Further setup instructions are within each payload file (if applicable).

You Should ALWAYS Read Any Scripts BEFORE running them

Fast-Execution-Scripts and GUI-Tools are pulled from github and staged using the 'Invoke-Expession' command.

Most other scripts were designed to avoid downloading external scripts or programs.

Download Tool