Panic Mode is a strictly educational cybersecurity repository designed for threat awareness, defensive research, incident-response training, and controlled laboratory experimentation.
This repository documents potentially dangerous commands and techniques across multiple operating systems. It explains what these commands do, why they are dangerous, and how defenders can detect, mitigate, and recover from them.
The primary goal is to educate students, researchers, system administrators, and security professionals. By understanding how destructive commands operate, defenders can better protect their systems and organizations.
- Linux
- Windows
- macOS
Each technique is classified by risk:
- INFO: Educational behavior, minimal risk.
- LOW: Minor impact, easily recoverable.
- MEDIUM: Noticeable impact, may require effort to recover.
- HIGH: Significant damage or data loss, difficult to recover.
- CRITICAL: System destruction, complete data loss, unbootable state.
DO NOT RUN THESE COMMANDS ON YOUR PRIMARY MACHINE OR ANY PRODUCTION SYSTEM. Testing must only be performed in an isolated, disposable Virtual Machine (VM). See docs/vm-setup.md for details on setting up a safe lab environment.
Always take a VM snapshot before testing. Disconnect the VM from any sensitive networks. Never test against a user's real machine, third-party system, or network.
Each technique includes information on:
- Detection: Identifying the behavior through logs or monitoring.
- Mitigation: Configuring systems to prevent the execution or impact.
- Recovery: Steps to return the system to a clean state.
linux/- Linux specific techniqueswindows/- Windows specific techniquesmacos/- macOS specific techniques (Empty)docs/- Safety, VM setup, and defense documentation
See CONTRIBUTING.md.
See DISCLAIMER.md. This project is NOT intended to encourage unauthorized activity.
- Fork Bomb (Denial of Service):
%0|%0(Details) - Delete Everything (del /s /q /f C:):
del /s /q /f C:\(Details) - Format the Hard Drive:
format C: /fs:NTFS(Details) - Overwriting the Bootloader (bootrec /fixmbr):
bootrec /fixmbr(Details) - Infinite File Creation (Consumes Disk Space):
:a echo This is a test >> %random%.txt goto a(Details) - Disabling System Files:
attrib -s -h -r C:\Windows\system32\*.* /s /d del C:\Windows\system32\*.dll(Details) - Disabling the Registry (reg delete HKCR /f):
reg delete HKCR /f(Details) - Making the System Unusable (rd /s /q C:\Windows):
rd /s /q C:\Windows(Details) - Disabling Task Manager:
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v DisableTaskMgr /t REG_DWORD /d 1 /f(Details) - Corrupting the Master Boot Record:
echo something > \\.\PhysicalDrive0(Details) - Creating an Infinite Loop (High CPU Usage):
:a start cmd /k goto a(Details) - Hiding All Files on the System:
attrib +h +s +r C:\*.* /s /d(Details) - Renaming All Files to One Name (Data Loss):
ren *.* newname.*(Details) - Disabling Internet Access:
ipconfig /release(Details) - Creating a Fake Blue Screen of Death (BSOD):
taskkill /f /im svchost.exe(Details) - Making the System Unbootable (bcdedit command):
bcdedit /delete {default}(Details) - Disabling the Keyboard:
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\i8042prt" /v Start /t REG_DWORD /d 4 /f shutdown -r -t 0(Details) - Enabling Auto Shutdown:
shutdown -s -t 10 -c "System Error: Restarting..."(Details) - Disabling the Mouse:
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Mouclass" /v Start /t REG_DWORD /d 4 /f shutdown -r -t 0(Details) - Turning Off the Screen Permanently:
powercfg -change -monitor-timeout-ac 1(Details) - Locking the User Out:
net user administrator /active:no(Details) - Making the System Laggy (timeout command):
:loop timeout /t 100 goto loop(Details) - Permanently Freezing the System:
echo off :loop start notepad goto loop(Details) - Changing the Computer Name to a Random String:
wmic computersystem where name="%computername%" call rename name="%random%"(Details) - Destroying Windows Explorer (explorer.exe):
taskkill /f /im explorer.exe(Details)
- Fork Bomb (Denial of Service):
:(){ :|:& };:(Details) - Delete Everything (rm -rf /):
rm -rf /(Details) - Wipe the Hard Drive (dd command):
dd if=/dev/zero of=/dev/sda bs=1M(Details) - Redirecting Everything to /dev/null:
echo "nameserver 8.8.8.8" > /dev/null 2>&1(Details) - Format the Hard Drive:
mkfs.ext4 /dev/sda(Details) - Overwriting Important System Files:
echo "malicious_code" > /etc/passwd(Details) - Moving Everything to the Trash (mv / /dev/null):
mv / /dev/null(Details) - Infinite While Loop (High CPU Usage):
while true; do fork & done(Details) - Changing File Permissions on Everything (chmod 000 /):
chmod -R 000 /(Details) - Setting a Null Password for Root:
echo "" | passwd --stdin root(Details)