134 Commits

Author SHA1 Message Date
RalphyZ
0ac3b7d58d Updated MacReverseShell payload (#93)
* Mac Reverse Shell

Starts a terminal window on a Mac,then creates a bash reverse shell inside a script, s.sh.  It then runs the script in the background and closes the terminal window.

* Added variables for IP and Port of the Netcat Listener

For ease of use, variables were added at the top for the IP Address and Port of the Netcat Listener.  Change those values to your listener and no other edits should be needed.

* Added persistence (and a reason to have a dropper)

This payload creates a bash reverse shell inside a script and adds persistence by adding the script to the Mac Launch Agent at a user defined interval.
2017-04-07 16:47:59 +10:00
Simen A K
243d50ab3a Updated InfoGrabber to version 2.0 (#32)
* InfoGrabber by MrSnowMonster - Version 1.0

A payload that collects information about a wndows computer and places it in a textfile.

* Update readme.md

* Update readme.md

* Update readme.md

* Update readme.md

* Update readme.md

* Update readme.md

* Update readme.md

* Update readme.md

* Update readme.md

* Update readme.md

* Update readme.md

* Update readme.md

* Version 1.1

* Update info.ps1

Added some mor informations and repaired "0123"
Testen on Win10

* Update 2

added windows passwords

* Update 1.1

Updated
2017-04-07 16:36:11 +10:00
ricky5ive
bfbb8afe43 Added dryClean payload (#98)
* Create README.md

* Create payload.txt
2017-04-07 16:32:11 +10:00
Darren Kitchen
4ce2b50cb2 Updated USB Exfiltrator payload for Bash Bunny v1.1 2017-04-07 16:30:44 +10:00
Darren Kitchen
d8ab0ac587 Removed tools-installer payload (deprecated in BB v1.1) 2017-04-07 16:02:48 +10:00
Darren Kitchen
4c41f449de Updated RDP Checker payload for Bash Bunny v1.1 2017-04-07 16:00:38 +10:00
Wesley
b864fc30a7 Added LinuxReverseShell payload (#107) 2017-04-07 15:57:19 +10:00
hink
1760b60b4f Added psh_DownloadExec payload (#110)
* [PAYLOAD] psh_DownloadExec

* readme

* Better status check and borrowed improvments from Hak5Darren

* Updated for BashBunny v1.1_x

* markdown fix
2017-04-07 15:54:54 +10:00
Darren Kitchen
5dbb31506d Updated nmapper payload for Bash Bunny v1.1 2017-04-07 15:51:26 +10:00
Darren Kitchen
20c820eeb0 Updated nmapper for Bash Bunny v1.1 2017-04-07 15:51:25 +10:00
Darren Kitchen
4346b86ecd Removed old smb_exfiltrator payload and renamed faster_smb_exfiltrator
Old version is now deprecated. I'll eventually merge the older technique
into the existing smb_exfiltrator with execution options.
2017-04-07 15:51:23 +10:00
illwill
147a71fe4f Added browsercreds, wificreds, and mrrobot payloads (#114)
* Initial commit

HID Powershell attack to dump WiFiCreds

* Update readme.md

* changed initial LED blink color to white

* Changed initial LED color to white

* Changed initial LED Color to white

* swapped sync before LED

* switched from powershell to batch

* Update payload.txt

* using powershell again , updated version and LEDs

* using powershell, added usb eject,  Win 7,8,10

* added window resizing to hide payload typing

* Update payload.txt

* pull request

* BrowserCreds Pull

* separate powershell script called from payload

also added result detection

* update LEDs

* Update payload.txt

* initial commit

* Update payload.txt

* initial pull

* initial commit
2017-04-07 15:48:20 +10:00
0xCoto
741b4a67e5 Added SingleSecondShell payload (#115)
* Add files via upload

* Update readme.md
2017-04-07 15:45:09 +10:00
Pete Camuso
34003917ee Added NothingLess payload (#120)
Maps the file system and stores it in c:\users\tempa
Shares a drive or location to everyone and grants full security permissions to everyone
2017-04-07 15:36:11 +10:00
bg-wa
63b281646a Added AndroidOpenURL payload (#125) 2017-04-07 15:33:02 +10:00
mrbaselier
5f582ed819 Added BlackBackup Payload (#129)
* BlackBackup

BlackBackup is a Powershell (and thus Windows) backup script that is easy to configure. Make quick backups of files, the registry, passwords, WiFi Keys, SAM database etc. and save them to the BashBunny. This is a HID + STORAGE attack. Now, let's eat some carrots!

* Update credentials.ps1
2017-04-07 15:31:01 +10:00
The10FpsGuy
ff05828ee8 Added Notepad_Fun Payload (#130)
* Funny Notepad Prank

* Update payload.txt

* Update payload.txt
2017-04-07 15:27:03 +10:00
DemmSec
f94fcc1b66 Added a Fireytv payload (#135)
* Created payload to shell an amazon fire tv

The payload performs keyboard emulation in order to enable ADB and unknown sources on the target FireTV. Once this is completed the payload then installs a payload.apk file via ADB and then runs it.

* Created readme
2017-04-07 15:18:34 +10:00
Baur
18e71d2882 Added DumpCreds 2.0 payload (#138)
* Add files via upload

Init of DumpCreds 2.0

Dumps the usernames & plaintext passwords from 
 - Browsers (Crome, IE, FireFox)
 - Wifi 
 - SAM Hashes
 - Mimimk@tz Dump
 - Computerinformation (Hardware Info, Windows ProductKey, Hotfixes, Software, Local, AD Userlist)
 
 without 
 - Use of USB Storage (Because USB Storage ist mostly blocked by USBGuard or DriveLock)
 - Internet connection (becaus Firewall ContentFilter Blocks the download sites)

* Minor Fix

* Somf file to much

* Changes in main.ps1 - paralellize the Powershell scripts

Changes in payload.txt - Universal payload no matter if admin rights or not

Some minor changes in all PS\*.ps1 files

Signed-off-by: qdba <dieter@baur.nu>

* Forget a File

* WifiCreds changed

* Changes in README.md

* Changed Get Chrome-Cred.ps1 from https://github.com/EmpireProject/Empire/tree/master/data/module_source/collection

Changed BUILD in main.ps1
Changed Build and Credits in README.md
2017-04-07 15:13:12 +10:00
jafahulo
eb68665c67 Update WiPassDump and add UnifiedRickRoll, Ascii-Prank, and Photobooth prank payload (#139)
* optimized WiPassDump payload to run in one file and a bit quicker.

* Create Prank folder and add UnifiedRickRoll payload

* Added UnifiedRickRoll support for windows

* Updated documentation on UnifiedRickRollWindows

* Causes payload to use roughly 30 times less processing power.

* Added Ascii-Prank Rick roll and Photo-Booth prank
2017-04-07 15:09:47 +10:00
DeeKoy
945b5c14d9 Added BruteBunny and ProcessInfo payloads (#140) 2017-04-07 15:01:37 +10:00
SirLurkSalot
fc1d812d96 Added PowershellTCPExtractor (#144) 2017-04-07 14:49:35 +10:00
Sebastian Kinne
19c581613a Merge branch 'master' of github.com:hak5/bashbunny-payloads 2017-04-07 14:30:25 +10:00
Sebastian Kinne
f485299bd5
Updated Captiveportal for Bash Bunny v1.1 2017-04-07 14:28:56 +10:00
Darren Kitchen
f554fcc4f4 Updated 90s Mode for Bash Bunny v1.1 2017-04-07 14:27:30 +10:00
Darren Kitchen
00cb49354b Updated 90s Mode for Bash Bunny v1.1 2017-04-07 14:08:44 +10:00
Sebastian Kinne
53a9e7fb69
Add docs and languages folder 2017-04-07 12:44:45 +10:00
Sebastian Kinne
6022c620e5
Remove obsolete payloads.txt 2017-04-07 12:43:14 +10:00
Sebastian Kinne
1968e2bc4e
Update default payloads to avoid confusion 2017-04-07 12:42:08 +10:00
Sebastian Kinne
23583addf5
Remove bunny_helpers.sh and add the new 1.1 extensions 2017-04-07 12:40:00 +10:00
Darren Kitchen
60616e7e35 Merge pull request #123 from hak5darren/master
Add faster SMB Exfiltrator payload
v1.0
2017-03-28 20:10:53 +07:00
Darren Kitchen
02d0358ccb Add faster SMB Exfiltrator payload 2017-03-28 20:10:01 +07:00
Sebastian Kinne
0df9fbfa41 Merge pull request #121 from JumboPackets/master
CaptivePortal: Change username input tag's type attribute from "username" to "text"
2017-03-28 07:47:02 +11:00
jumbopackets
0f2ddd9abe Change username input tag's type attribute from "username" to "text"
"username" is not a valid value for the type attribute in an input tag,
which causes it to fail formal validation.  Probably would never
*really* affect anything, but...you know...
2017-03-26 15:55:43 -04:00
jumbopackets
2bbd262876 Add Eclipse .project file to .gitignore 2017-03-26 15:39:40 -04:00
Darren Kitchen
46e65e5eff Merge pull request #96 from surrealalucard/master
Modified smb_exfil to be more hidden
2017-03-23 09:17:35 +07:00
Darren Kitchen
67005a8b0d Updated LED status and added discussion link 2017-03-23 07:55:59 +07:00
Sebastian Kinne
7bbb092d54 Merge pull request #59 from audibleblink/payload/shellexec
[PAYLOAD] - ShellExec
2017-03-23 08:48:05 +11:00
Surreal
2978c85d6a Updated smb_exfiltrator to be more hidden
Modified -WindowStyle to be hidden instead of minimized
2017-03-22 16:13:32 -04:00
Darren Kitchen
e73dd7df9e Merge pull request #86 from hak5darren/master
Add SMB Exfiltrator Payload
2017-03-22 22:16:51 +07:00
Darren Kitchen
42819e4e6b Add SMB Exfiltrator Payload
This is an awesome payload check out Hak5 episode 2202
2017-03-21 14:12:41 +07:00
Sebastian Kinne
c9e41fc7d9
Payload: Fixed CaptivePortal 2017-03-21 08:19:12 +11:00
Alex Flores
8582c62376 iptables are always the answer 2017-03-16 18:22:38 -04:00
Alex Flores
448aea41c3 monkey patch fqdn search in BaseHTTPServer 2017-03-16 18:07:15 -04:00
Sebastian Kinne
14472b2a05 Merge pull request #65 from mathew-fleisch/master
Payload: Fixed a bug and updated the read-me doc.
2017-03-17 06:54:27 +11:00
Mathew Fleisch
afd4e45e6c Updated read-me 2017-03-16 12:33:56 -07:00
Mathew Fleisch
9dab90d52a Moved log file location and changed how the /dev/nandf mount is detected. 2017-03-16 11:45:19 -07:00
Mathew Fleisch
c9f037ee9d Use wild card instead of explicit directory numbers 2017-03-16 11:12:24 -07:00
Mathew Fleisch
a1fcf6d584 Added better logging for debugging and updated read-me 2017-03-16 10:29:11 -07:00
Mathew Fleisch
00a365a706 Fixed a bug and updated the read-me doc. 2017-03-15 22:19:43 -07:00