Search the Community

Hoi hoi! Could we, er, perhaps have Twisted as a tool to use with the Bunny? Could be fun turning the Bunny into a bunch of different servers. I'm specifically looking at using the Bunny as a DNS server for DNS attacks. But you know, why not use it as a chat server as well. Maybe a mail server too while we're at it. Oh, and there's a web server inbuilt too.. Yea. I wants it. But can't work out how to get it on the Bunny! (Tarball not cutting it, pip errors hard..)

WabbitWeb The ultimate payload-handling tool! Hey guys, I finally got around to uploading my first payload, after many weeks of tinkering with it - trying to get it to work. So, what did I spend hours upon days upon multiple weeks making? This. A tool that focuses mainly on handling payloads. With this tool, you have to know that payloads are referred to as Letters, as the payloads are saved as letters (A, B and C). Target: Windows 7, 8, 8.1, 10 Dependencies: Impacket - For SMB server - WabbitWeb will still work without Impacket, but won't start the SMB server Directory 'ww' - Holds everything, basically Features: BashBunny-hosted python webserver - Handles all of the events, commands and pages! - Beautiful, user-friendly web interface that scales with your screen! File Command System (FCS - makes it sound a bit fancier) - Uses the BashBunny's file system to handle commands and functions! - If there is a file called COMMAND.sh in the 'ww' directory, it will instantly source and delete it! - Allows WabbitWeb to have a CLI interface in the website itself! Payload Launcher - Website app (handled by FCS) - Launch a Letter you just created using the Payload Editor! Payload Editor - Website app (handled by FCS) - Create a Letter, a payload saved to a letter (A, B or C) that is runnable almost instantly! - Doesn't handle existing payloads, only allows you to create new ones (future feature, maybe?) Command Line - Pass commands straight to the Bunny! - Logs and saves all commands to WabbitWeb! SMB Launcher - Website app (handled by FCS) - Launches a SMB server at WabbitWeb's payload folder - giving you access to all it's code DURING RUNTIME! - Automagically starts up a Windows Explorer window pointed straight at the SMB server! - Edit your Letters in your own editor (e.g. Notepad++) or copy your own payload to the folder, then use the Payload Launcher to run them! Shutdown (yes..this is a feature!) - Website app (handled by FCS) - Shuts down WabbitWeb (...what did you expect?) - Uses ATTACKMODE OFF to hide, thanks to firmware 1.3! Known bugs: Payload Editor - LED commands return a usage error - Sleep functions don't register - Swapping ATTACKMODEs isn't wise (doable, but it doesn't like it too much) Github: Link to Github page I will be updating this quite a bit in the background, so stay tuned if you are interested in keeping this up-to-date. I will only upload versions that are working properly, so don't worry if you think that its main features (Letters - Payload Launcher and Payload Editor) might not be working and therefore not update. Currently the files are in their own Github (master), so if anyone could give me a rundown of how to get Darren to put them in the payloads folder, shout at me in the comments or PM me. Usage: To use WabbitWeb, just copy the contents of the Github repo to a switch, plug the Bunny in with that switch ready and let it fly. Once it is flashing blue, you can open up Chrome (preferably Chrome, but most web browsers should work fine) and go to: 172.16.64.1:80 which will take you to the WabbitWeb's home page! From there, you can create payloads (known as Letters), launch the Letters you make, start up an SMB server so you can edit the Letters firsthand and edit the webpages if you really want..or just see the code as it is running. Okay, that's cool. How do I edit a Letter from the SMB server's folder? All you need to do is go to the 'scripts' folder and you should see 3 script files (among a few other files) there, la.sh, lb.sh and lc.sh. They are your A, B and C letters. If you create a payload using the Payload Editor, you will see the scripts update. If you create a script using Notepad++ or another program like that (e.g. Notepad - ew..) and save it as one of those letters, you can launch it using the Payload Launcher! Keep in mind that any output you make goes straight to a log file in the usual logs folder, so don't bother manually making a log file unless you want it somewhere specific. Screenshots: Link to Imgur post Updates: Updated to 1.0.1 on 5/05/17 Updated to 1.0.2 on 5/05/17 Updated to 1.0.3 on 8/05/17 Updated to 1.0.4 on 10/05/17 Updated to 1.0.5 on 10/05/17 Updated to 1.0.6 on 11/05/17 Updated to 1.1.0 on 22/05/17 Updated to 1.1.1 on 23/05/17 Feel free to give me lots of constructive feedback! Also, if you can think of anything that may fix any of the bugs above, feel free to comment/PM me! If you find any more bugs, comment below - I'll check this post most days. This payload is open-source and editable as you like, but please do not post a copy of this as your own work, as it isn't nice and it isn't your own work!

Hello, I know it will be an ubsurd request because this is a hacking forum :) I'm a developer and I'm making my money by selling a program, but I realized that someone cracked my program and distributing it. I'm currently using WinLicense for encryption. Do you know a better program for license and/or encryption?

USB Rubber Ducky Tool Windows GUI for USB Rubber Ducky Description This tool was made to help beginner users of the USB Rubber Ducky create and copy payloads directly to their Ducky's MicroSD card. I decided to do this mini project since I am in an Intro C# class. I added all the features/options I could think of and tried to make is as user friendly as possible. I would love any feedback, recommendations, or tips that you have to offer! The GitHub Project Direct Download Features Select HD: Which drive the home directory for the ducky will be made.MicroSD: Which removable storage device the .bin file will be copied to.Refresh Devices: Will refresh the HD and MicroSD options.Keyboard Layout: Allows users to select keyboard layout of scripts using encoder 2.x options. Eject: Ejects the MicroSD card. Save Payload: Saves contents of messagebox to text file. Make .bin: Creates .bin based on the .txt script made using the encoder. Copy .bin: Copies .bin made to removable storage device selected. To-DO List Payload Selection: Allow users to select pre-existing payloads from the Rubber Ducky Wiki.Firmware Options: Ability to change Ducky's Firmware.Recommendations? I'll take any ideas and recommendations users may have!Screenshot

Greetings everyone, I'm not from the Hak5 team but I wanted to share my work. I've made a small command line tool that can convert any plain/text file into a ducky script. I didn't know if this type of tool already exists so I created mine. Tool capabilities : Convert any file plain/text file (no matter it's size). Append commands after each lines More will come soon. Please note that this tool is "Open Source" you can download it from github, it's written in Pascal (see link below). For the moment this tool can only be executed on Windows. If you want to run it on a Linux system you can still use Wine until a new version is released. Tool in action : 1. Choose a plain/text file (no matter it's extension) This file will be converted into a ducky script ! 2. Run the tool with the following parameters (DSC -i myfile.dat -a DELAY 100,ENTER) 3. This file will be converted and the tool will create a new one (myfile.dat.dsc) with the following content STRING This file DELAY 100 ENTER STRING will be DELAY 100 ENTER STRING converted into DELAY 100 ENTER STRING a ducky script ! DELAY 100 ENTER This can be useful if you have a long script to write, like a VBScript or whatever. GitHub link : https://github.com/CDevCom/DuckyStringConverter Best regards, CDevCom.

Here's a bash script that lets you easily compile scripts as well as flash firmware! Unfortunately, when I paste the script directly on to this page, it isn't shown correctly so here is a dropbox link to it (my Github account has messed up a bit so I can't sync my repositories anymore): Link (Click Here!) Here's the script if you want to review it before downloading:

For the full tour of the application, please view http://www.elithecomputerguy.com/ETCGCommunity/index.php?do=/forum/thread/65/aircrack-ngui/. Mods, I am not redirecting to another site for any ad purposes. Merely because you have an image limit. So, the abridged version. My program is a graphical interface to Aircrack-NG, dsniff, and nmap (at least the main part). If you go to "Other Tools", it includes other network/computer security tools that you can use (including Wireshark, MAC Changer, BURP Suite, TOR Network). My overall goal of the application is to be a "swiss army knife" for those learning network security and network professionals alike. Let me know if you can help develop, run quality control, or beta test. It's currently up on BitBucket and you can get the link from http://aircrackngui.blogspot.com. Also, let me know what you think. Good idea, bad idea, done too often, doesn't compete with other suites like it? Thank you for your time.

Dear friends, I write some program with Microsoft Visual C# and .NET. i want to encode this program...so i use the more crypts tools....but i have not a good result. the Antivirus are all times catch it.so finally i use the shikata_ga_nai tool. yes it is working well. The all antivirus are bypassing well.that's my command....... sudo cat /root/Desktop/test1.exe | msfencode -c 1 -e x86/shikata_ga_nai > /test2.exe but problem is : The program is not working........ I try is windows XP 32 bit and 64 bit OS.....but same problem...... The error massage is: " Program too big to fit into memory " how to fix this problems? that problem only with shikata_ga_nai tool......plz help me.....