ASarcasticGuy 6542907c6e Added FileInfoExfil payload (#76)
* Scan for files that contain a specific phrase and exfil info about them

* Delete FileInfoExfil

* Create FileInfoExfil

* Delete FileInfoExfil

* Scans system for files beginning with a specific phrase and exfils data from them

* Delete ducky_script.txt

* Delete p.bat

* Delete payload.txt

* Exfil file information to the loot folder

Exfiltrates file information of files that contain a specific phrase, including if it is a directory, the file path and file size (in KB) to the loot folder of the BashBunny.

* Delete p.ps1

* Add files via upload

* Create readme.md

* Delete readme.md

* Create readme.md

* Update payload.txt

* Update readme.md
2017-04-07 17:18:48 +10:00
..
2017-04-07 17:18:48 +10:00
2017-04-07 17:18:48 +10:00
2017-04-07 17:18:48 +10:00

Exfiltrate File Information

Author: @A_SarcasticGuy
Target: Windows
Version: Version 1.0

Description

Exfiltrate file information if they start with a specific passphrase, and once complete the Bunny should be ejected

NOTE: The Bunny will only be ejected when it is not in use, so if the scan is still continuing it will fail to eject

Configuration

HID STORAGE

Requirements

p.ps1 file MUST be in /payloads folder.

STATUS

LED Status
Purple Script Started
Yellow Ducky Script Started
Red Failed to find Ducky Script