Jump to content
Hak5 Forums


Active Members
  • Content count

  • Joined

  • Last visited

  • Days Won


1 Follower

About bg-wa

  • Rank
    Hak5 Fan ++

Recent Profile Visitors

The recent visitors block is disabled and is not being shown to other users.

  1. bg-wa

    [MOD] Custom Bunny Switch

    Customize your Bash Bunny with this 3D Printed switch! Lose or break your switch? Print a new one! Do you have a bunny infestation? Organize them by colors instead of tape! Get it here: https://github.com/bg-wa/bash-bunny-switch The switch surface area is large enough to draw/print a single character for further customization. Enjoy!
  2. I also tried this, without much luck. I was trying to touch a new file at either [/Volumes/.../mac.txt] or [/meadi/.../linux.txt] etc. in a loop, then check for that file on the bunny side. It sort of worked, but wasn't great. HID only TARGET OS would be great, but I haven't put much time into researching 2-way HID communication possibilities with standard drivers.
  3. bg-wa

    The Bunny Cage

    I present: The Bunny Cage The Bunny Cage is a CHIP single board computer, with battery, broadcasting its own AP and running Bash Bunny Studio With this device, you can program your Bash Bunny wirelessly from your phone or tablet, then let it out of the cage when your payload is ready! STL Files Here: https://github.com/bg-wa/bash-bunny-cage This is a really simple project that can be run on any SBC, with wifi and Rails installed. Enjoy!
  4. bg-wa

    Bash Bunny Studio

    Alright, I reworked almost the entire app... The UI is now built on Foundation, is mobile friendly and is much easier to maintain. I'll be finishing up some small features shortly, but I don't foresee any more major framework overhauls at this point. @Dave-ee Jones Feel free to submit a PR with whatever additional UI changes you want to see! If anyone else wants to contribute, or test (especially on Windows) please jump right in!
  5. bg-wa

    Bash Bunny Studio

    Bash Bunny Studio can now: - Edit multiple files in your payload folders. - Run Git commands - Glow in the dark ENJOY!
  6. bg-wa

    Bash Bunny Studio

    I just put this on a CHIP (w/ battery, hosting an AP), and I can now manage/edit payloads, from my phone over wifi!! This is cool because I can now use one BB, and load/edit any payload I want, in the field on the fly! If I want to change the OS, target_dir, or ETH adapter, I don't even need a laptop! Pretty stoked about this! @C1PH3R you are correct. For now, you can only edit the payload.txt on each switch, I'll probably add some recursive editors to each payload tab, but I'll need some logic to determine syntax hilighting for different file types... I should probably add a tab to access loot data as well... and a BB updater... Lots of fun stuff ahead, but the core is here. @Sebkinne Let me know if there are any other features you had in mind for this project. This is quickly becoming my main development workflow, so I'm sure I'll be adding it quite a bit over the next few weeks.
  7. bg-wa

    Bash Bunny Studio

    Here is a little tool I wrote today to manage most bash bunny functions from the web browser. I was tired of copying files all over the place in a file manager, so this lets me do 90% of my development from one screen. This tool lets you mount/unmount the bunny, clone a BB github repo, one-click copy payloads to either switch, in-browser edit payloads, manage extensions, and view debug logs. Feel free to fork and add to it! https://github.com/bg-wa/bash-bunny-studio
  8. bg-wa

    File Exfil for Linux?

    Like @C1PH3R said, I'd probably replace Lines 19-22 with: RUN UNITY xterm (for some reason I've had better luck executing commands in xterm than with terminal in Unity) and you'll also need to change your loot_dir to something like: /media/$USER/BashBunny/loot/XYZ then obviously 'killall xterm' instead of terminal. ** Also untested
  9. bg-wa

    A help to simplify playloads

    Hey Luca, You can cut down this code, by putting your file types into an array, then loop through that array, executing at each object your if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.[YOUR FILE EXTENSION FROM ARRAY] %dst% >>nul) https://stackoverflow.com/questions/8880603/loop-through-an-array-of-strings-in-bash This will trim up your code for each location. To make it even smaller, you should throw that line into a new function, then call it, passing your location and file-type. As a positive side effect, will also make the script much easier to test and maintain. https://stackoverflow.com/questions/6212219/passing-parameters-to-a-bash-function
  10. bg-wa

    USB Power Prime To Eliminate Boot Time

    Yep, @Rinilyn. Your post reminded me to go back and look at this. I just though I'd put it in an easier to find location, rather than bury it in your post. In my tests I didn't need to do anything with Cucumber. I would have liked it to auto-detect the OS like you had mentioned (or faster yet, just the TARGET_IP), but trying to set the attackmode to eth, without the bunny plugged in, stalled the script and didn't execute any code following the attackmode. The solution I found, using SWITCH, doesn't automatically continue your script, but toggling the switch is an easy solution at this point. In the future I'd like to figure out a way to automate this. My next attempt will be enabling storage, and trying to detect when the Bunny is mounted, then continue the script... Sounds easy enough right?
  11. I remember this being a topic a while back and I couldn't find a dedicated thread. So, I thought I would share how I was able to eliminate boot time, by priming the Bash Bunny with a USB power supply, then use the new SWITCH extension to instantly execute a payload when I plug-in/toggle switch. This could be super useful if you had to, say, wait 15 seconds for a web-server to boot up on your Bunny... The cable I used is included in the Pineapple Nano: The (Super Simple) Code: https://github.com/bg-wa/bashbunny-payloads/blob/warmup/payloads/library/general/warmup/payload.txt (There is probably a better way to automatically wait for the device to be plugged in, but SWITCH worked for this POC.)
  12. bg-wa

    Bash Bunny newbie needing help with tools

    It sounds like you have done a good job troubleshooting so far. A couple things I'd try next would be: Try peppering your payload with the DEBUG command to write some custom logs and see exactly where your script is failing. (https://github.com/hak5/bashbunny-payloads/blob/master/payloads/extensions/debug.sh) Screen/putty into the Bunny and try running the commands you think are failing, manually. This will help you figure out any dependencies you may be missing (https://wiki.bashbunny.com/#!index.md) You can easily install dependencies with a shared internet connection (https://www.hak5.org/gear/bash-bunny/docs) Pick a specific payload, troubleshoot as far as you can with the above methods, then ask a more specific question on the selected payload's official thread (https://forums.hak5.org/forum/93-payloads/)
  13. bg-wa

    BashBunnyBurrow (3D Printed Case)

    Splicing the cable would not organize the IO from both devices; I think you would need some sort of USB hub inside the mouse to do this. So, by the time you get a hub (even if you soldered instead of using standard connectors) and the bash bunny (even without a case) plus the original parts, I don't think it would all fit... Ha. Maybe one of these would work? https://www.greatbigstuff.com/products/computer-mouse
  14. This is a dumb POC I threw together that remixes the Original Ducky 3D print (https://www.thingiverse.com/thing:752379) to embed a Bash Bunny. ** As noted elsewhere in the forums, putting a Bash Bunny in an enclosure like this can quickly overheat the device. So, maybe don't do this... Get it here: https://github.com/bg-wa/bash-full-bunny The Setup: ME: Hey Janet, I know how much you love decorating for the holidays. So, I printed you this cute little bunny for your desk. His head even lights up as you get pwned. JANET: OMG, its so cute. Can I plz plug it into my computer?