Flipper Zero BadUSB Demonstration Uses Netcat for Reverse-Shell Access

· 8:16 · Watch on YouTube ↗

Summary

The video demonstrates Flipper Zero BadUSB scripts that inject keystrokes, use PowerShell to download netcat from a Kali Linux host, and connect a Windows target back to a listener for remote shell access.

Key points

  • The presenter demonstrates BadUSB scripts on a Flipper Zero, which inject keystrokes and run commands when connected to a computer.
  • A sample script opens Windows Command Prompt and uses PowerShell to download netcat from a Kali Linux host.
  • The presenter starts a netcat listener on port 4444 and demonstrates the target computer connecting back to it for reverse-shell access.
  • The video also shows editing and transferring a BadUSB script with QFlipper, including a script that opens a browser page.
  • The demonstration describes remote access to a target computer but provides no defensive guidance or details about safeguards.

Article Details

Topics
  • [00:13] Using a USB Rubber Ducky or Flipper Zero BadUSB to run scripts on a connected computer
  • [02:07] Demonstrating the Flipper Zero's built-in Windows BadUSB script
  • [03:50] Using PowerShell to download netcat and setting up a Kali Linux listener for reverse-shell access
  • [06:18] Modifying and transferring BadUSB scripts with QFlipper