Jump to content

larsc3po

Members
  • Posts

    5
  • Joined

  • Last visited

Posts posted by larsc3po

  1. Is your switch position in the correct place?  This payload shouldn't install a network adapter, which is why I ask, and that is what it sounds like it's doing...

    ATTACKMODE HID STORAGE

    From my experience, some of these payloads don't seem to be 100% and will require you to dink around a bit to get them to work.  This was one of them for me.  I couldn't get it to work and had to rewrite it before I got anywhere.

  2. On 3/16/2017 at 1:37 AM, jokre said:

    Please note that the "key=clear" part of the netsh command (in the a.cmd file for this payload) requires local admin privileges on the specific Windows box to get anything out of it. I.e. the logged on user on the PC has to be a local admin, otherwise key=clear will produce nada... So... that part will be "step 1" to verify. If the tests of the payload is executed in a lab environment (or on a PC where you can get access to the box the "correct" way), then logon and run the netsh command in the way it is specified in the a.cmd file of the payload. If netsh throws back an error telling you that it needs to be executed with admin privileges, then the current logged in user has no rights to issue this command with the key=clear "switch". The payload could perhaps be enhanced to catch the error that the command throws back at you and if it says you need admin rights, then the payload could either blink a sequence telling that the execution went bad or put the status in a file on the local storage of the bunny (or both). If working on boxes with a language other than English, the "error catch part" of the payload has to be adjusted so that it can handle error messages in the appropriate system language as well.

    I ran the netsh command on a Windows 10 laptop logged in as a user that's a standard user and it returns the clear text pw.  If you try to get past UAC as a standard user, that won't work though.

  3. If I'm not misunderstanding the question, I don't think it's possible. Once you setup autossh it starts a reverse tunnel to a host that you can use to manage the turtle. The reason you can connect to the turtle when its connected to your USB port is because you're technically on "its" network at that point.

  4. Having the same issue with every module it seems. SSHFS is enabled and functioning, but when you try to configure modules to save the log using sshfs, it doesn't work. Quite a pita.

    Using urlsnarf and you can start it, but it doesn't log anywhere. If you go to configure and you tell it to save the log location to /tmp or to SSHFS, it selects, you hit ok, go back into the configuration and it's right back to "do not save log file".

    I've tried several things, like rebooting the turtle and rebooting my linux machine, but nothing works reliably. I'm getting to the point, just like with the Pineapple, of just using the command line and running things manually.

×
×
  • Create New...