$SWITCH_POSITION problem in powershell?

[Black_chameleon]

I just ran the USB Exfiltration script from switch1. The powershell command included the $SWITCH_POSITION text instead of it being expanded. I have the updated bunny_helpers.sh that includes the "export SWITCH_POSITION" command.

When I manually changed the payload.txt to point to switch1, the scripts finished perfectly!

  Original: QUACK STRING powershell ".((gwmi win32_volume -f 'label=''BashBunny''').Name+'payloads\$SWITCH_POSITION\d.cmd')"

I changed to: QUACK STRING powershell ".((gwmi win32_volume -f 'label=''BashBunny''').Name+'payloads\switch1\d.cmd')"

Any way I can help debug this?  Willing to try anything to help figure this out.

[IMcPwn]

The problem is needing to escape the QUACK string because it includes a bash variable. This pull request fixes it: https://github.com/hak5/bashbunny-payloads/pull/17

 

The correct line is: 

QUACK STRING powershell ".((gwmi win32_volume -f 'label=''BashBunny''').Name+'payloads\\$SWITCH_POSITION\d.cmd')"

 

[Black_chameleon]

Thank you So much!

I just found that and manually changed it. Fixed my problem.

May I delete this post since that fix was discussed here: