mirror of
https://github.com/hak5/bashbunny-payloads.git
synced 2025-10-29 16:58:25 +00:00
Mac Docs Exfilter for the BashBunny
| \ / \ / \ | \ |
| $$$$$$$| $$$$$$| $$$$\ | | $$
| $$ | | | | $$______ $$/ $$
| $$ | | | | | \ >
| $$ | | | | __ $$$$$$/ $$$$\
| $$/ $$| $$/ $$| __/ \ | $$
| $$ \$$ | |
$$$ $$ $$ $ \$
- Author: afsh4ck
- Version: 1.0
- Target: MacOS
- Tested on: Ventura 13.3.1
- Category: Exfiltration
DESCRIPTION
Exfilter all the documents from the principal folders on unlocked MacOS targets. Stashes them in /loot/MacDocsExfill/$hostname grouped in subfolders:
| Subfolder | Content |
|---|---|
| Documents | All the docs in /root/Documents folder |
| Desktop | All the docs in /root/Desktop folder |
| Downloads | All the docs in /root/Downloads folder |
IMAGE FORMATS
| Format |
|---|
| .docx |
| .xlsx |
LED STATUS
| LED | Status |
|---|---|
| Green | Setup |
| Yellow Blink | Attack Mode ON |
| Purple Slow | Cleaning all proofs |
| Green Fixed | Finish |