Onus Posted March 21, 2017 Share Posted March 21, 2017 So playing around with some Mac HID STORAGE payloads, I noticed that when you pull out the OS will leave a message prompt "Bash Bunny was not ejected properly" is there a way to eject from the payload script? Quote Link to comment Share on other sites More sharing options...
GermanNoob Posted March 21, 2017 Share Posted March 21, 2017 I haven't tried it but probably you could do this with the terminal umount command... Quote Link to comment Share on other sites More sharing options...
GermanNoob Posted March 21, 2017 Share Posted March 21, 2017 Tested it... Well it is: diskutil unmount /Volumes/BashBunny Works for me Quote Link to comment Share on other sites More sharing options...
Sebkinne Posted March 21, 2017 Share Posted March 21, 2017 6 minutes ago, GermanNoob said: Tested it... Well it is: diskutil unmount /Volumes/BashBunny Works for me Yup, that's the only way to do it cleanly. It should always be done anyway, as otherwise files may not be written to mass storage correctly. Quote Link to comment Share on other sites More sharing options...
Onus Posted March 22, 2017 Author Share Posted March 22, 2017 danka.. this should be a best practice.. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.