Jump to content

TMB

Members
 View Profile  See their activity

  • Posts

    4

  • Joined

  • Last visited

 Content Type 

Posts posted by TMB

    Bash Bunny Screen Logger

    in Hacks & Mods

    Posted

    On 6/30/2017 at 5:20 PM, TMB said:

    I just bought a Bash Bunny, how can I develop my own attackmode module. Is it feasible to create a USB Monitor that takes screenshots at intervals?

    Let me give background to my original question.

    I have taken a screenshot using scripting via an HID attack and powershell. I'm not seeking responses regarding that, or on different ways to do that. A screenshot can be taken via HID, I have already established that and it's not a transparent attack. It cannot be done (starting the attack) whilst a person is using the machine, or while it's transitioning from locked to unlocked. Written HID attacks are very OS specific, you take screenshots differently on different OSes (and that's the easy part), saving the screenshot on the other hand is less trivial depending on the OS. As well, you cannot record video easily.

    NOW:

    Is it feasible to create a USB Display Adapter ATTACKMODE ? That is, you plug in the Bunny and it pretends to be a secondary display adapter. Benefits being, as a PnP adapter, you can record screenshots or record video of activity WHILST is computer is in use. Presumptuously, the Bunny could be installed whilst the machine is locked and visually record activity from when the user unlocks it, till it's removed.

    In the most basic form, the question is: how do you develop a custom ATTACKMODE module? Or, is that access only availble to Hak5?

    Bash Bunny Screen Logger

    in Hacks & Mods

    Posted

    On 7/1/2017 at 11:15 AM, digip said:

    Print screen button, saves a copy to clip board. You could in theory macro the process to open paint on windows, paste, and then save and exit, with the name based on the current time+date, so they store in order by time and day. This however would alert someone if they see it pop up on screen.

    However, you could use something like nircmd, but might set off anit-virus(it's a legit tool though), but you'd have to execute it against the system like so:

    "nircmd.exe savescreenshot screen1.png" while scripting the naming convention to match your needs. See http://www.nirsoft.net/utils/nircmd.html for the program.

    I don't own a bunny, so you'll have to test if that will work(for windows anyway). In linux, you can generally just do "import screenshot.png" but ImageMagick needs to be installed to make it work. Might be a default package on some linux distros, not 100% sure what ones install it by default though. If it's a gnome system, gnome-screenshot is probably installed and will do the same thing more or less, but read the help file for output.

    MAC systems, you can use screencapture but I think the default format is PDF. I don't own a mac, so google is your friend for help on this one, which is how I found it(and the above options)

     

     

    I'm aware that you can take a screenshot via keyboards commands. It's a trivial task, but also easy to catch out. An emulated USB monitor, assuming it automatically installs via plug and play, would allow you to monitor a screen even while the device is in use. And possibly record continuous video or screenshots transparent to the user.

×
×
  • Create New...