hak5/bashbunny-payloads
1
0
Fork 0
mirror of https://github.com/hak5/bashbunny-payloads.git synced 2025-10-29 16:58:25 +00:00
Code Issues Packages Projects Releases Wiki Activity
486 Commits 3 Branches 3 Tags
cd5cdc147018c9cd612bdded3b6a3cae6a47e500
Commit Graph

486 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
drapl0n
cd5cdc1470 Merge branch 'hak5:master' into master 2022-04-30 08:45:36 +05:30
KarrotKak3
f12c486e12 Add files via upload (#518) 
New Payload. FireSnatcher
 2022-04-29 18:05:40 -05:00
cribb-it
3f41494153 New Payload - KeyManger Backup (#517) 
* New Payload - KeyManger Backup

* Update Desc
 2022-04-20 14:04:44 -05:00
0iphor13
1eef8dc006 Updated README.md (#513) 
* Uploaded ReverseBunny

Obfuscated reverse shell via powershell

* Uploaded WifiSnatch

Get your targets stored wifi information and credentials, store them on your Bashbunny and hop away 🐇

* Update ReverseBunny.txt

Changed payload to evade Windows Defender

* Update payload.txt

Added new "Eject Method" - props to Night(9o3)

* Update README.md

* Deleted ReverseBunny.txt

Deleted because of higher risk to get caught by AV

* Updated ReverseBunny to version 1.2

Updated ReverseBunny to version 1.2.
- Deleted payload on disk because of AV
- Added custom shell design

* Updated ReverseBunny to version 1.2

Updated README for ReverseBunny update

* Updated payload

fixed some stupid left overs <3

* Uploaded pingUinBunny

a reverse shell using icmp

* Delete payloads/library/remote_access/switch1 directory

* Uploaded pingUinBunny

A reverse shell using icmp

* Update README.md

* Update README.md

* Updated to PingZhell

* Update Bunny.pl

* Update README.md

* Update README.md

* Update payload.txt

* Rename payloads/library/remote_access/pingUinBunny/Bunny.pl to payloads/library/remote_access/PingZhellBunny/Bunny.pl

* Rename payloads/library/remote_access/pingUinBunny/PingZhell.ps1 to payloads/library/remote_access/PingZhellBunny/PingZhell.ps1

* Rename payloads/library/remote_access/pingUinBunny/README.md to payloads/library/remote_access/PingZhellBunny/README.md

* Rename payloads/library/remote_access/pingUinBunny/payload.txt to payloads/library/remote_access/PingZhellBunny/payload.txt

* Update payload.txt

* Update README.md

* Update README.md

* Update Bunny.pl

* Created ProcDumpBunny

Dump lsass.exe with a renamed version of procdump and get the users hashes with Mimikatz

* Update README.md

* Update payload.txt

* Updated ReverseBunny

Fixed wrong DELAY commands

* Updated PingZhellBunny

Fixed wrong DELAY commands

* Updated WifiSnatch

Fixed multiple mistakes

* Uploaded HashDumpBunny

Use your BashBunny to dump the user hashes of your target - similar to the msf post-module.
The script was obfuscated with multiple layers, so don't be confused.
If you don't trust this script, run it within a save testing space - which should be best practice anyways ;)

* added example picture

* Update README.md

* Uploaded SessionBunny

Utilize SessionGopher (Slightly modified) to find PuTTY, WinSCP, and Remote Desktop saved sessions. It decrypts saved passwords for WinSCP.
Extracts FileZilla, SuperPuTTY's saved session information in the sitemanager.xml file and decodes saved passwords.

Afterwards decide which is important and what you want to save onto your BashBunny.

* Uploaded SessionBunny

Utilize the famous, here slightly modified SessionGopher script, to find PuTTY, WinSCP, and Remote Desktop saved sessions. It decrypts saved passwords for WinSCP.
Extracts FileZilla, SuperPuTTY's saved session information in the sitemanager.xml file and decodes saved passwords.

Decide which inforamtion you wanna take with you - save it onto your BashBunny!

* Update README.md

* Delete SessionBunny directory

* Uploaded MiniDumpBunny

Dump lsass with this rewritten and for BashBunny adapted version of Powersploits Out-MiniDump.

* Update README.md

added disclaimer

* Update README.md

* Update README.md

* Update README.md
 2022-04-17 14:47:41 -05:00
drapl0n
797cf561d5 persistentReverseBunny (#515) 
* persistentReverseBunny

Added obfuscation layer by completely encoding reverse shell mechanism.

* fixing typo

* adding payload
 2022-04-14 16:10:51 -05:00
drapl0n
bd4ec90d04 Changing systemd Unit (#514) 
* Uploaded BunnyLogger

* uploading payload intel

* Create README.md

* Update README.md

* uploaded LinuxPreter

* uploaded FileRipper

Faster executing version

* Update README.md

* fixing typo

* uploaded sudoSnatch

* Update README.md

* deleting sudoSnatch

* uploading payload

* Delete payload.sh

* Delete shell

* Delete systemBus

* Delete camPeek directory

* Update payload.sh

* Update payload.sh

* Delete payloads/library/execution/FileRipper directory

* Update payload.sh

* Update payload.sh

* Update payload.sh

* Update payload.sh
 2022-04-14 16:09:21 -05:00
drapl0n
0c82f52167 Update payload.sh 2022-04-14 20:19:03 +05:30
drapl0n
45e4bd1d38 Update payload.sh 2022-04-14 20:17:28 +05:30
drapl0n
0829d88f02 Update payload.sh 2022-04-14 20:16:59 +05:30
drapl0n
5a0e445023 Update payload.sh 2022-04-14 20:16:14 +05:30
drapl0n
4e2593beb4 Delete payloads/library/execution/FileRipper directory 2022-04-14 20:15:21 +05:30
drapl0n
7917c1b60d Update payload.sh 2022-04-14 20:14:33 +05:30
drapl0n
ed7872815d Update payload.sh 2022-04-14 20:13:20 +05:30
drapl0n
773073a057 Merge branch 'hak5:master' into master 2022-04-14 20:11:52 +05:30
0iphor13
e11f9281cb Updated ReadMe (#512) 
* Uploaded ReverseBunny

Obfuscated reverse shell via powershell

* Uploaded WifiSnatch

Get your targets stored wifi information and credentials, store them on your Bashbunny and hop away 🐇

* Update ReverseBunny.txt

Changed payload to evade Windows Defender

* Update payload.txt

Added new "Eject Method" - props to Night(9o3)

* Update README.md

* Deleted ReverseBunny.txt

Deleted because of higher risk to get caught by AV

* Updated ReverseBunny to version 1.2

Updated ReverseBunny to version 1.2.
- Deleted payload on disk because of AV
- Added custom shell design

* Updated ReverseBunny to version 1.2

Updated README for ReverseBunny update

* Updated payload

fixed some stupid left overs <3

* Uploaded pingUinBunny

a reverse shell using icmp

* Delete payloads/library/remote_access/switch1 directory

* Uploaded pingUinBunny

A reverse shell using icmp

* Update README.md

* Update README.md

* Updated to PingZhell

* Update Bunny.pl

* Update README.md

* Update README.md

* Update payload.txt

* Rename payloads/library/remote_access/pingUinBunny/Bunny.pl to payloads/library/remote_access/PingZhellBunny/Bunny.pl

* Rename payloads/library/remote_access/pingUinBunny/PingZhell.ps1 to payloads/library/remote_access/PingZhellBunny/PingZhell.ps1

* Rename payloads/library/remote_access/pingUinBunny/README.md to payloads/library/remote_access/PingZhellBunny/README.md

* Rename payloads/library/remote_access/pingUinBunny/payload.txt to payloads/library/remote_access/PingZhellBunny/payload.txt

* Update payload.txt

* Update README.md

* Update README.md

* Update Bunny.pl

* Created ProcDumpBunny

Dump lsass.exe with a renamed version of procdump and get the users hashes with Mimikatz

* Update README.md

* Update payload.txt

* Updated ReverseBunny

Fixed wrong DELAY commands

* Updated PingZhellBunny

Fixed wrong DELAY commands

* Updated WifiSnatch

Fixed multiple mistakes

* Uploaded HashDumpBunny

Use your BashBunny to dump the user hashes of your target - similar to the msf post-module.
The script was obfuscated with multiple layers, so don't be confused.
If you don't trust this script, run it within a save testing space - which should be best practice anyways ;)

* added example picture

* Update README.md

* Uploaded SessionBunny

Utilize SessionGopher (Slightly modified) to find PuTTY, WinSCP, and Remote Desktop saved sessions. It decrypts saved passwords for WinSCP.
Extracts FileZilla, SuperPuTTY's saved session information in the sitemanager.xml file and decodes saved passwords.

Afterwards decide which is important and what you want to save onto your BashBunny.

* Uploaded SessionBunny

Utilize the famous, here slightly modified SessionGopher script, to find PuTTY, WinSCP, and Remote Desktop saved sessions. It decrypts saved passwords for WinSCP.
Extracts FileZilla, SuperPuTTY's saved session information in the sitemanager.xml file and decodes saved passwords.

Decide which inforamtion you wanna take with you - save it onto your BashBunny!

* Update README.md

* Delete SessionBunny directory

* Uploaded MiniDumpBunny

Dump lsass with this rewritten and for BashBunny adapted version of Powersploits Out-MiniDump.

* Update README.md

added disclaimer

* Update README.md

* Update README.md
 2022-04-08 09:43:17 -05:00
drapl0n
614b70bb8f Uploading ScreenGrab (#511) 
* uploading screenGrab

screenGrab payload captures snap shots of target's screen periodically and store them into bunny.

* Uploading payload
 2022-04-08 09:31:30 -05:00
drapl0n
46d069c0a9 uploaded imagesOfYore (#510) 
* uploaded imagesOfYore

imagesOfYore payload steals every image that target ever had in his disk.

* Delete payload.txt

* uploading imagesOfYore
 2022-04-08 09:25:24 -05:00
drapl0n
55d34722fd uploading bunnyDOS (#509) 
* uploading bunnyDOS

bunnyDOS payload intelligently search target's network for open http(configurable for https) ports and performs DOS on it.

* Delete payload.txt

* Add files via upload
 2022-04-08 09:23:03 -05:00
drapl0n
0fccb70651 Delete camPeek directory 2022-04-01 22:10:59 +05:30
drapl0n
afee861549 Delete systemBus 2022-04-01 22:09:46 +05:30
drapl0n
564be0e217 Delete shell 2022-04-01 22:09:37 +05:30
drapl0n
82874a3e87 Delete payload.sh 2022-04-01 22:09:30 +05:30
drapl0n
c56bb8791f Merge branch 'hak5:master' into master 2022-04-01 21:41:06 +05:30
drapl0n
7bd90b7308 uploaded camPeek (#508) 
* uploaded camPeek

camPeek payload peeks through targets web cam and capture images

* Delete payload.txt

* uploading payload
 2022-04-01 11:05:39 -05:00
drapl0n
53e4bdfef7 Merge branch 'hak5:master' into master 2022-04-01 21:34:01 +05:30
drapl0n
8f2f2f94f5 uploading payload 2022-04-01 21:33:41 +05:30
drapl0n
b58284adaa uploaded dirtypipe (#506) 
* uploaded dirtypipe

Exploit for a new Linux vulnerability known as 'Dirty Pipe(CVE-2022-0847)' allows local users to gain root privileges.

* exploit

* Create README.md

* fixing typo
 2022-03-23 10:12:49 -05:00
drapl0n
7f3972b88a uploaded sudoSnatch (#507) 
* uploaded sudoSnatch

sudoSnatch payload grabs sudo password in plain text, imediately after victim uses `sudo` command and sends it back to attacker remotely/locally.

* changing payload category

* uploaded sudoSnatch
 2022-03-22 16:09:51 -05:00
drapl0n
6a0d5e83fd deleting sudoSnatch 2022-03-22 21:03:40 +05:30
drapl0n
fbb563fd31 Update README.md 2022-03-21 22:42:39 +05:30
drapl0n
b6d43475c3 uploaded sudoSnatch 2022-03-21 22:26:02 +05:30
drapl0n tuxed0
3ecad65a86 fixing typo 2022-03-19 19:28:43 +05:30
drapl0n tuxed0
99a6ff18e5 Update README.md 2022-03-18 21:13:23 +05:30
drapl0n tuxed0
8f04d1cdc9 uploaded FileRipper 
Faster executing version
 2022-03-18 21:07:43 +05:30
drapl0n tuxed0
92970ad6ff Merge branch 'hak5:master' into master 2022-03-18 21:03:07 +05:30
cribb-it
946879ae90 New Payload - Random vid (#504) 
* readme

* Payload
 2022-03-16 16:28:18 -05:00
0iphor13
6bacea8bc8 Uploaded MiniDumpBunny (#503) 
* Uploaded ReverseBunny

Obfuscated reverse shell via powershell

* Uploaded WifiSnatch

Get your targets stored wifi information and credentials, store them on your Bashbunny and hop away 🐇

* Update ReverseBunny.txt

Changed payload to evade Windows Defender

* Update payload.txt

Added new "Eject Method" - props to Night(9o3)

* Update README.md

* Deleted ReverseBunny.txt

Deleted because of higher risk to get caught by AV

* Updated ReverseBunny to version 1.2

Updated ReverseBunny to version 1.2.
- Deleted payload on disk because of AV
- Added custom shell design

* Updated ReverseBunny to version 1.2

Updated README for ReverseBunny update

* Updated payload

fixed some stupid left overs <3

* Uploaded pingUinBunny

a reverse shell using icmp

* Delete payloads/library/remote_access/switch1 directory

* Uploaded pingUinBunny

A reverse shell using icmp

* Update README.md

* Update README.md

* Updated to PingZhell

* Update Bunny.pl

* Update README.md

* Update README.md

* Update payload.txt

* Rename payloads/library/remote_access/pingUinBunny/Bunny.pl to payloads/library/remote_access/PingZhellBunny/Bunny.pl

* Rename payloads/library/remote_access/pingUinBunny/PingZhell.ps1 to payloads/library/remote_access/PingZhellBunny/PingZhell.ps1

* Rename payloads/library/remote_access/pingUinBunny/README.md to payloads/library/remote_access/PingZhellBunny/README.md

* Rename payloads/library/remote_access/pingUinBunny/payload.txt to payloads/library/remote_access/PingZhellBunny/payload.txt

* Update payload.txt

* Update README.md

* Update README.md

* Update Bunny.pl

* Created ProcDumpBunny

Dump lsass.exe with a renamed version of procdump and get the users hashes with Mimikatz

* Update README.md

* Update payload.txt

* Updated ReverseBunny

Fixed wrong DELAY commands

* Updated PingZhellBunny

Fixed wrong DELAY commands

* Updated WifiSnatch

Fixed multiple mistakes

* Uploaded HashDumpBunny

Use your BashBunny to dump the user hashes of your target - similar to the msf post-module.
The script was obfuscated with multiple layers, so don't be confused.
If you don't trust this script, run it within a save testing space - which should be best practice anyways ;)

* added example picture

* Update README.md

* Uploaded SessionBunny

Utilize SessionGopher (Slightly modified) to find PuTTY, WinSCP, and Remote Desktop saved sessions. It decrypts saved passwords for WinSCP.
Extracts FileZilla, SuperPuTTY's saved session information in the sitemanager.xml file and decodes saved passwords.

Afterwards decide which is important and what you want to save onto your BashBunny.

* Uploaded SessionBunny

Utilize the famous, here slightly modified SessionGopher script, to find PuTTY, WinSCP, and Remote Desktop saved sessions. It decrypts saved passwords for WinSCP.
Extracts FileZilla, SuperPuTTY's saved session information in the sitemanager.xml file and decodes saved passwords.

Decide which inforamtion you wanna take with you - save it onto your BashBunny!

* Update README.md

* Delete SessionBunny directory

* Uploaded MiniDumpBunny

Dump lsass with this rewritten and for BashBunny adapted version of Powersploits Out-MiniDump.
 2022-03-14 09:25:29 -05:00
su3158
2e297ba861 Array for Japanese added. (#465) 2022-03-13 18:01:52 +00:00
drapl0n tuxed0
a4141f7312 Uploaded LinuxPreter (#502) 
* Uploaded BunnyLogger

* uploading payload intel

* Create README.md

* Update README.md

* uploaded LinuxPreter
 2022-03-12 16:27:24 -06:00
drapl0n tuxed0
0ce6ccbedf uploaded LinuxPreter 2022-03-11 22:40:37 +05:30
drapl0n tuxed0
7790d6dd1a Merge branch 'hak5:master' into master 2022-03-11 22:23:53 +05:30
electronicintifida
f03f67be29 Add files via upload (#422) 2022-03-10 19:30:54 +00:00
drapl0n tuxed0
2785fbc4db Uploading payload "intel(intelligence)" (#501) 
* Uploaded BunnyLogger

* uploading payload intel

* Create README.md

* Update README.md
 2022-03-08 11:22:58 -06:00
drapl0n tuxed0
fa06629d0b Update README.md 2022-03-08 22:16:27 +05:30
drapl0n tuxed0
a047694d6b Create README.md 2022-03-08 22:15:56 +05:30
drapl0n tuxed0
54a1f45ae2 uploading payload intel 2022-03-08 22:06:57 +05:30
drapl0n tuxed0
effbd69614 Merge branch 'hak5:master' into master 2022-03-08 22:01:28 +05:30
drapl0n tuxed0
2fdb38a3b4 Uploaded BunnyLogger (#500) 2022-03-07 09:50:39 -06:00
drapl0n
ed25a7bfb4 Uploaded BunnyLogger 2022-03-05 23:11:49 +05:30
drapl0n tuxed0
db8fdc67f4 created sshDump (#499) 2022-03-04 13:35:03 -06:00