Jump to content

Didier Stevens

Active Members
  • Posts

    22
  • Joined

  • Last visited

Posts posted by Didier Stevens

  1. I updated my HID file dropping method for the Bash Bunny.

    This is for hardened computers that don't accept removable storage.

    Steps:

    • create a pure ASCII PDF with embedded file (for example EXE) using my make-pdf-embedded tool
    • create a Ducky script to type out said PDF
    • launch notepad on target machine and type out content of PDF
    • save file as .pdf file
    • open with Adobe Reader
    • extract embedded file
    • if necessary, change extension
    • open file

    More details: https://blog.didierstevens.com/2017/04/24/bash-bunny-pdf-dropper/

×
×
  • Create New...