[firmware 1.1 problem quickcreds]

Ok, i found out what was the problem that made any attempt with Quickcreds fail !

inside the folder tree i had:

/tools/Responder instead of /tools/responder/ ,

and even if changing the payload.txt to point at /tools/Responder/ the code somehow was failing.

Decide then to rename /tools/Responder with /tools/responder without any modify of payload and voila ! the code was completed without any errors.

Thanks to Altecheon to let me run that test and let me think once more again on it

i dont know why even if modify the payload and point Responder  instead of responder wasnt working but at least now is working so it's all good !!

/cheers

[firmware 1.1 problem quickcreds]

7 hours ago, Altecheon said:

can you guys successfully connect to the BB through ssh with the ip 172.16.64.1? If so see if you can ping the IP given to the machine, usually mine is 172.16.64.10. It should show via ifconfig or ipconfig in the respective operating systems if the system is receiving an IP. An example payload of these in action is as follows.

This should create a file at /temp/ named TestOutput. To access it log into the bunny and look for it

I don't have my bunny at the moment to test the code, but you should be able to see what the payloads see. If you cannot access the bunny, make sure that your computer can correctly see the bunny (ex drivers found)

Thanks for the answer, i was able to running the code you posted:

 

-confirm the LED R SLOW is ok

and here is the content of the TestOutput:

 

172.16.64.10 WS-ATIHD6870

 

so i think everything is completed fine without any errors.

I still dont understand why the Quickcreds hang on LED R SLOW and fail...

 

thanks anywways

[[RELEASE] Bash Bunny 1.1]

On 7/4/2017 at 3:57 AM, illwill said:

@hardrock78 try something like this if you are testing on windows

LED B SLOW

ATTACKMODE RNDIS_ETHERNET
LED STAGE1
GET TARGET_IP;GET TARGET_HOSTNAME;GET HOST_IP

ATTACKMODE HID
LED STAGE2
RUN WIN NOTEPAD
Q DELAY 1000
Q STRING Switch#:${SWITCH_POSITION} - IP:${TARGET_IP} - HOST:${TARGET_HOSTNAME} - BunnyIP: ${HOST_IP}

LED FINISH

 

I did try this code and my return is:

 

Switch£çswitch2 ' IPç ' HOSTç ' BunnyIPç 172.16.64.1

does that mean anything is not working ? looks like the only variables returned are switch&host_ip but not target_ip & hostname ?

no clue but probably is related to the quickcreds not working ..

[firmware 1.1 problem quickcreds]

Hello,

within the new upgraded firmware from 1.0 to latest 1.1 i have some problems with running payloads that need to "GET TARGET_IP".

i have downloaded  the latest payloads folder tree with git --> https://github.com/hak5/bashbunny-payloads/

this is the content of the get.sh file  inside the folder /payloads/library/extensions:

 

#!/bin/bash

function GET() {
    case $1 in
        "TARGET_IP")
            export TARGET_IP=$(cat /var/lib/dhcp/dhcpd.leases | grep ^lease | awk '{ print $2 }' | sort | uniq)
            ;;
        "TARGET_HOSTNAME")
            export TARGET_HOSTNAME=$(cat /var/lib/dhcp/dhcpd.leases | grep hostname | awk '{print $2 }' | sort | uniq | tail -n1 | sed "s/^[ \t]*//" | sed 's/\"//g' | sed 's/;//')
            ;;
        "HOST_IP")
            export HOST_IP=$(cat /etc/network/interfaces.d/usb0 | grep address | awk {'print $2'})
            ;;
        "SWITCH_POSITION")
            [[ "$(cat /sys/class/gpio_sw/PA8/data)" == "0" ]] && export SWITCH_POSITION="switch1" && return
            [[ "$(cat /sys/class/gpio_sw/PL4/data)" == "0" ]] && export SWITCH_POSITION="switch2" && return
            [[ "$(cat /sys/class/gpio_sw/PL3/data)" == "0" ]] && export SWITCH_POSITION="switch3" && return
            export SWITCH_POSITION="invalid"
            ;;
    esac
}

export -f GET

Opened with Notepad++ i have aso did the step: --> Edit --> EOL --> convert to UX format.

I remove the BB, switch1 then plugged in i still see the Purple led and right after keep getting red led continuosly.

inside the loot folder the result is noname.

may the GET TARGET_IP not working as intended or as the previous bunny_helpers.sh ?

Both responder and impacket are installed.

really have no idea why fail ... any help ? or any that get the same issue on new firmware 1.1 ?

 

thanks

[mdk3 and other error]

confirmed also by my attempt to get mdk3 and still getting the same message,

root@Pineapple:~# opkg --dest sd install mdk3

Installing mdk3 (v6-1) to sd...

Downloading http://cloud.wifipineapple.com/mk5/packages/mdk3_v6-1_ar71xx.ipk.

wget: server returned error: HTTP/1.1 404 Not Found

Collected errors:

* opkg_download: Failed to download http://cloud.wifipineapple.com/mk5/packages/mdk3_v6-1_ar71xx.ipk, wget returned 1.

* opkg_install_pkg: Failed to download mdk3. Perhaps you need to run 'opkg update'?

* opkg_install_cmd: Cannot install package mdk3.

[Gateway always sets to the default - 172.16.42.42]

i can confirm the same issue, once i use "client mode" on the wired connection tab i don't have internet access.

i used as parameters:

default 192.168.1.254 0.0.0.0 UG 0 0 0 wlan1

192.168.1.0 * 255.255.255.0 U 0 0 0 eth0
192.168.1.0 * 255.255.255.0 U 0 0 0 wlan1

once i use recon mode or pine ap i will lost the internet connection so does the client connected thru the mark5

using last firmware available 2.4.0

[ICS with or without wp5.sh thru router/switch]

Hello,

been few hours looking around the forum about the ICS and so far have see many posts with ICS with Linux or Windows.

My question is :

-how the ICS work with the mark5 connected ethernet thru a router/Switch ?

the script still working ? how do you setup the mark5 on the Network section ?

my setup is:

from infusion --> network --> wired section -->

Kernel IP routing table

Destination Gateway Genmask Flags Metric Ref Use Iface
default 192.168.1.254 0.0.0.0 UG 0 0 0 wlan1
192.168.1.0 * 255.255.255.0 U 0 0 0 br-lan
192.168.1.0 * 255.255.255.0 U 0 0 0 wlan1

br-lan Link encap:Ethernet HWaddr 00:13:37:A5:56:4F

inet addr:192.168.1.133 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:183633 errors:0 dropped:30864 overruns:0 frame:0
TX packets:36835 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:52641992 (50.2 MiB) TX bytes:10742125 (10.2 MiB)

with this one i just provide mark5 for the access to the webpage but no web until i configure and setup the wlan1 interface like this:

wlan1 Link encap:Ethernet HWaddr 00:13:37:97:2E:EB

inet addr:192.168.1.109 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:140421 errors:0 dropped:28176 overruns:0 frame:0
TX packets:1116 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:40998187 (39.0 MiB) TX bytes:91435 (89.2 KiB)

but now the problem is:

once pineap and karma is fired up i lose the internet connection and still connected with the mark5 in order to see what going on but ? how the rogue ap will get thru the web ?

Any ideas ?

i need to use an external wlan2 to get the game going ?

pretty strange that i cannot just share the internet connection with the mark5 thru a router

thanks

[Connecting to internet using ethernet (client mode)]

I can also confirm that i have the same issue with Mark5 v. 2.4.0 have access to the local device by the IP i set as static but it still doesn't route to the internet. DHCP does nothing. wlan1 is the only way i have to getting to the internet.

[mark5 bar linker on start webinterface]

Hello folks,

I'm playing with my newly pineapple mark5 and getting this message every time i log into the web interface:

"WiFi Pineapple Bar Linker

The infusion linker has detected orphaned infusions stored on your SD card.

It has automatically added them to the webinterface. You may now close this popup.

dd

"

Actually i have installed all the user infusion i have found on the list to the SD may is that a reason.

Beside that the device is working .. anything i can do to remove it or just don't care ?

Let me know please

Thanks