Updated RDP Checker payload for Bash Bunny v1.1

This commit is contained in:
Darren Kitchen
2017-04-07 15:59:41 +10:00
parent b864fc30a7
commit 4c41f449de
2 changed files with 45 additions and 33 deletions

View File

@@ -1,43 +1,52 @@
# Title: RDP Checker for Bash Bunny # Title: RDP Checker for Bash Bunny
# Author: Hak5Darren # Author: Hak5Darren
# Version: 1.0 # Version: 1.1
# Target: Windows
# Category: Enumeration
# #
# Checks whether RDP is enabled on target machine # Checks whether RDP is enabled on target machine
# #
# REQUIREMENTS # REQUIREMENTS
# impacket installed in /pentest (run tools-installer if not) # ============
# Needs impacket to be copied to /tools/impacket and installed
# Option A:
# 1. Download impacket from https://github.com/CoreSecurity/impacket
# 2. Copy impacket folder to /tools on the Bash Bunny flash drive
# 3. Boot Bash Bunny into arming mode and connect to console via serial
# 4. Issue "python /tools/impacket/setup.py install"
# Option B:
# 1. Download impacket deb package
# 2. Copy impacket.deb to /tools on the Bash Bunny flash drive
# 3. Boot Bash Bunny into arming mode. Impacket will install automatically.
# #
# LED STATUS # LED STATUS
# white (blinking)...dependencies not installed # ==========
# purple.............setup # FAIL..............Failed to find dependencies
# amber (blinking)...scanning # SETUP.............Setting up attack
# red................RDP not enabled # ATTACK............Scanning
# green..............RDP enabled # GREEN SUCCESS.....RDP Enabled
# FAIL2.............RDP Not Enabled
# Check for dependencies. If not met, blink white and end.
if [ ! -d /pentest/impacket/ ]; then
LED R G B 100
exit 1
fi
# Setup Ethernet ######## INITIALIZATION ########
LED R B
REQUIRETOOL impacket
LED SETUP
ATTACKMODE RNDIS_ETHERNET ATTACKMODE RNDIS_ETHERNET
# ATTACKMODE ECM_ETHERNET # ATTACKMODE ECM_ETHERNET
GET TARGET_IP
# Get $TARGET_IP from Bunny Helpers
source bunny_helpers.sh
# Start scan
LED G R 100
/pentest/impacket/examples/rdp_check.py $TARGET_IP >> /tmp/rdp_check
######## ATTACK ########
LED ATTACK
python /tools/impacket/examples/rdp_check.py $TARGET_IP >> /tmp/rdp_check
# Check scan results and set LED red or green accordingly # Check scan results and set LED red or green accordingly
if grep Granted /tmp/rdp_check if grep Granted /tmp/rdp_check
then then
# RDP is enabled # RDP is enabled
LED G LED G SUCCESS
else else
# RDP is not enabled # RDP is not enabled
LED R LED FAIL2
fi fi

View File

@@ -1,26 +1,29 @@
# RDP Checker for Bash Bunnys # RDP Checker for Bash Bunny
Author: Hak5Darren - Title: RDP Checker for Bash Bunny
Version: Version 1.0 - Author: Hak5Darren
- Version: 1.1
- Target: Windows
- Category: Enumeration
## Description ## Description
Checks whether RDP is enabled on target machine Checks whether RDP is enabled on target machine
Green=Enabled. Red=Disables. Green=Enabled. Red=Disabled.
## Requirements ## Requirements
impacket must be installed in /pentest (run tools-installer if not) impacket must be installed and setup in /tools
## STATUS ## STATUS
| LED | Status | | LED | Status |
| ---------------- | ------------------------------------- | | ------------- | ----------------------------- |
| White (blinking) | Dependencies not installed. | | FAIL | Failed to find dependencies |
| Purple | Setup. | | SETUP | Setting up attack |
| Amber (blinking) | Scanning | | ATTACK | Scanning |
| Red | RDP not enabled. | | GREEN SUCCESS | RDP Enabled |
| Green | RDP enabled. | | FAIL2 | RDP Not Enabled |
## Discussion ## Discussion