103 Commits

Author SHA1 Message Date
bg-wa
63b281646a Added AndroidOpenURL payload (#125) 2017-04-07 15:33:02 +10:00
mrbaselier
5f582ed819 Added BlackBackup Payload (#129)
* BlackBackup

BlackBackup is a Powershell (and thus Windows) backup script that is easy to configure. Make quick backups of files, the registry, passwords, WiFi Keys, SAM database etc. and save them to the BashBunny. This is a HID + STORAGE attack. Now, let's eat some carrots!

* Update credentials.ps1
2017-04-07 15:31:01 +10:00
The10FpsGuy
ff05828ee8 Added Notepad_Fun Payload (#130)
* Funny Notepad Prank

* Update payload.txt

* Update payload.txt
2017-04-07 15:27:03 +10:00
DemmSec
f94fcc1b66 Added a Fireytv payload (#135)
* Created payload to shell an amazon fire tv

The payload performs keyboard emulation in order to enable ADB and unknown sources on the target FireTV. Once this is completed the payload then installs a payload.apk file via ADB and then runs it.

* Created readme
2017-04-07 15:18:34 +10:00
Baur
18e71d2882 Added DumpCreds 2.0 payload (#138)
* Add files via upload

Init of DumpCreds 2.0

Dumps the usernames & plaintext passwords from 
 - Browsers (Crome, IE, FireFox)
 - Wifi 
 - SAM Hashes
 - Mimimk@tz Dump
 - Computerinformation (Hardware Info, Windows ProductKey, Hotfixes, Software, Local, AD Userlist)
 
 without 
 - Use of USB Storage (Because USB Storage ist mostly blocked by USBGuard or DriveLock)
 - Internet connection (becaus Firewall ContentFilter Blocks the download sites)

* Minor Fix

* Somf file to much

* Changes in main.ps1 - paralellize the Powershell scripts

Changes in payload.txt - Universal payload no matter if admin rights or not

Some minor changes in all PS\*.ps1 files

Signed-off-by: qdba <dieter@baur.nu>

* Forget a File

* WifiCreds changed

* Changes in README.md

* Changed Get Chrome-Cred.ps1 from https://github.com/EmpireProject/Empire/tree/master/data/module_source/collection

Changed BUILD in main.ps1
Changed Build and Credits in README.md
2017-04-07 15:13:12 +10:00
jafahulo
eb68665c67 Update WiPassDump and add UnifiedRickRoll, Ascii-Prank, and Photobooth prank payload (#139)
* optimized WiPassDump payload to run in one file and a bit quicker.

* Create Prank folder and add UnifiedRickRoll payload

* Added UnifiedRickRoll support for windows

* Updated documentation on UnifiedRickRollWindows

* Causes payload to use roughly 30 times less processing power.

* Added Ascii-Prank Rick roll and Photo-Booth prank
2017-04-07 15:09:47 +10:00
DeeKoy
945b5c14d9 Added BruteBunny and ProcessInfo payloads (#140) 2017-04-07 15:01:37 +10:00
SirLurkSalot
fc1d812d96 Added PowershellTCPExtractor (#144) 2017-04-07 14:49:35 +10:00
Sebastian Kinne
19c581613a Merge branch 'master' of github.com:hak5/bashbunny-payloads 2017-04-07 14:30:25 +10:00
Sebastian Kinne
f485299bd5
Updated Captiveportal for Bash Bunny v1.1 2017-04-07 14:28:56 +10:00
Darren Kitchen
f554fcc4f4 Updated 90s Mode for Bash Bunny v1.1 2017-04-07 14:27:30 +10:00
Darren Kitchen
00cb49354b Updated 90s Mode for Bash Bunny v1.1 2017-04-07 14:08:44 +10:00
Sebastian Kinne
6022c620e5
Remove obsolete payloads.txt 2017-04-07 12:43:14 +10:00
Sebastian Kinne
1968e2bc4e
Update default payloads to avoid confusion 2017-04-07 12:42:08 +10:00
Sebastian Kinne
23583addf5
Remove bunny_helpers.sh and add the new 1.1 extensions 2017-04-07 12:40:00 +10:00
Darren Kitchen
60616e7e35 Merge pull request #123 from hak5darren/master
Add faster SMB Exfiltrator payload
2017-03-28 20:10:53 +07:00
Darren Kitchen
02d0358ccb Add faster SMB Exfiltrator payload 2017-03-28 20:10:01 +07:00
jumbopackets
0f2ddd9abe Change username input tag's type attribute from "username" to "text"
"username" is not a valid value for the type attribute in an input tag,
which causes it to fail formal validation.  Probably would never
*really* affect anything, but...you know...
2017-03-26 15:55:43 -04:00
Darren Kitchen
46e65e5eff Merge pull request #96 from surrealalucard/master
Modified smb_exfil to be more hidden
2017-03-23 09:17:35 +07:00
Darren Kitchen
67005a8b0d Updated LED status and added discussion link 2017-03-23 07:55:59 +07:00
Sebastian Kinne
7bbb092d54 Merge pull request #59 from audibleblink/payload/shellexec
[PAYLOAD] - ShellExec
2017-03-23 08:48:05 +11:00
Surreal
2978c85d6a Updated smb_exfiltrator to be more hidden
Modified -WindowStyle to be hidden instead of minimized
2017-03-22 16:13:32 -04:00
Darren Kitchen
e73dd7df9e Merge pull request #86 from hak5darren/master
Add SMB Exfiltrator Payload
2017-03-22 22:16:51 +07:00
Darren Kitchen
42819e4e6b Add SMB Exfiltrator Payload
This is an awesome payload check out Hak5 episode 2202
2017-03-21 14:12:41 +07:00
Sebastian Kinne
c9e41fc7d9
Payload: Fixed CaptivePortal 2017-03-21 08:19:12 +11:00
Alex Flores
8582c62376 iptables are always the answer 2017-03-16 18:22:38 -04:00
Alex Flores
448aea41c3 monkey patch fqdn search in BaseHTTPServer 2017-03-16 18:07:15 -04:00
Sebastian Kinne
14472b2a05 Merge pull request #65 from mathew-fleisch/master
Payload: Fixed a bug and updated the read-me doc.
2017-03-17 06:54:27 +11:00
Mathew Fleisch
afd4e45e6c Updated read-me 2017-03-16 12:33:56 -07:00
Mathew Fleisch
9dab90d52a Moved log file location and changed how the /dev/nandf mount is detected. 2017-03-16 11:45:19 -07:00
Mathew Fleisch
c9f037ee9d Use wild card instead of explicit directory numbers 2017-03-16 11:12:24 -07:00
Mathew Fleisch
a1fcf6d584 Added better logging for debugging and updated read-me 2017-03-16 10:29:11 -07:00
Mathew Fleisch
00a365a706 Fixed a bug and updated the read-me doc. 2017-03-15 22:19:43 -07:00
Sebastian Kinne
aa6bc50c39 Merge pull request #40 from ralphyz/master
Reverse Shell - with auto-increment port
2017-03-16 10:34:57 +11:00
Sebastian Kinne
df5f9f804e Merge pull request #37 from WatskeBart/patch-1
Removed STORAGE from switch 2 payload.txt
2017-03-16 09:33:17 +11:00
Sebastian Kinne
3c5046f907 Merge pull request #60 from hak5darren/master
Add 90sMode Payload for immense fun
2017-03-16 07:57:05 +11:00
Alex Flores
da987207f6 made some edits
* removed the paranoia mount. we don't need to test that the kernel
is doing it's job when mount fstab

* log to a persistent location

* edited ignore loop to include hidden directories
2017-03-15 15:44:01 -04:00
Mathew Fleisch
d1598208c2 Minor changes and cleanup 2017-03-15 08:47:09 -07:00
Mathew Fleisch
a30bd97954 Made some changes based on audibleblink's suggestions/comments 2017-03-15 08:29:28 -07:00
Darren Kitchen
47c863e5b5 Add 90sMode Payload for immense fun 2017-03-15 21:36:36 +07:00
Alex Flores
b30ff86c2c add ShellExec payload 2017-03-15 02:30:29 -04:00
Mathew Fleisch
d094d2c6e0 Payload to automatically set up/update git repo
This payload was made in collaboration with audibleblink through irc. We both came up with the same idea, but I took it a step further, by adding a git-pull/update after the first payload execution. Original repo at https://github.com/mathew-fleisch/Git-Bunny-Git
2017-03-14 21:43:53 -07:00
Sebastian Kinne
8a07d71927 Merge pull request #45 from GermanNoob/master
Updated install.sh to solve problems mentioned in forum
2017-03-14 14:05:20 +11:00
Sebastian Kinne
6c84710e9e Merge pull request #49 from audibleblink/update/smacandgrab
Payload: smacandgrab - adds comments and apple keyboard vid/pid
2017-03-14 13:50:39 +11:00
Sebastian Kinne
1e8406bc38 Merge pull request #52 from mrt0mat0/MRS
Add Mac Reverse Shell payload
2017-03-14 13:48:03 +11:00
Chris
70af321846 MRS initial add of reverse shell for mac 2017-03-13 21:50:31 -04:00
Chris
00684c8857 MRS initial add of reverse shell for mac 2017-03-13 21:45:07 -04:00
Alex Flores
6e5aeb2cfa mod hid/pid to show as apple keyboard 2017-03-13 18:57:54 -04:00
Alex Flores
0fd8973e12 fixes broken code
- fixes lootdir path
  - dont capitalize var names that aren't exported
  - indentation
  - escape shell characters that are passed to QUACK
  - account for variable copy times by joining cp and exit commands
  - sync the disk
2017-03-13 14:58:25 -04:00
Alex Flores
889723f455 version bump 2017-03-13 14:32:33 -04:00