Feature Request For The Next Firmware

[RazerBlade]

Hello!

I wonder if in the next firmware that you could include a ATTACKMODE which makes the whole Bunny read-only expect the loot folder to be able to exfiltrate information without AV being able to remove malicious binaries for instance.

[Dice]

Wasnt this availabe in 1.2  ATTACKMODE RO_STORAGE ?

This would render the entire storage readonly on a very low level.

making just one folder read/writable would set the baselevel of readonly very hard.

 

Edited May 9, 2017 by Dice

[Dice]

Considering, you could alternate between the ATTACKMODE STORAGE and the ATTACKMODE RO_STORAGE in the script to allow the script to write data to the loaded partition/ datastore.

 

however, i cannot predict how the OS (windows/linux) would react to the change between a readonly/writable partition and the required (?) reload