mirror of
https://github.com/hak5/bashbunny-payloads.git
synced 2025-10-29 16:58:25 +00:00
31 lines
1.1 KiB
Markdown
31 lines
1.1 KiB
Markdown
# Process Info for Bash Bunny
|
|
|
|
* Author: Decoy
|
|
* Version: Version 1.0
|
|
* Target: Windows
|
|
|
|
## Description
|
|
|
|
This is just a quick and dirty payload to return all running processes under the current user.
|
|
This will return the path/filename/version, and quite a bit of other info as well. This information
|
|
can be useful for planning future attacks, such as taking advantage of buffer overflows, and other
|
|
various vulnerabilities to gain a more permanent foothold into a target system. It can also be
|
|
useful in identifying what AV is in use on a target system.
|
|
|
|
## Configuration
|
|
|
|
None needed.
|
|
|
|
## STATUS
|
|
|
|
| LED | Status |
|
|
| ------------------ | -------------------------------------------- |
|
|
| Amber (blinking) | Setting up |
|
|
| Amber | Attack running |
|
|
| White (blinking) | Moving loot to mass storage |
|
|
| Blue (blinking) | Syncing File System |
|
|
| Green | Trap is clean |
|
|
|
|
## Discussion
|
|
https://forums.hak5.org/index.php?/topic/40605-payload-process-info/
|