Decoy Posted April 2, 2017 Share Posted April 2, 2017 (edited) BruteBunny Author: Decoy Version: Version 1.0 Target: Windows Description I would say that some (most) people don't realize that devices they connect to their networks usually have weak default usernames and passwords. The Brute Bunny will exploit that in hopes of finding some poor sap who didn't change their admin password for their device, and educate them accordingly. Configuration Modify the variables in brutebunny.ps1 to change the default IP/Port for this attack. Feel free to use your own wordlists as well; however you will need to adjust some of the sleep times accordingly depending on the length of time your list will take to go through. Notes This was designed and tested on a Netgear Nighthawk Router, and an Arris Xfinity Modem/Router combo; however I don't see why it couldn't be used for any internet connected device that uses basic http authentication. https://github.com/hak5/bashbunny-payloads/tree/master/payloads/library/credentials/BruteBunny Edited September 9, 2019 by Decoy Quote Link to comment Share on other sites More sharing options...
Decoy Posted September 9, 2019 Author Share Posted September 9, 2019 Updated to reflect new payload location. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.