RazerBlade Posted May 9, 2017 Share Posted May 9, 2017 Hello! I wonder if in the next firmware that you could include a ATTACKMODE which makes the whole Bunny read-only expect the loot folder to be able to exfiltrate information without AV being able to remove malicious binaries for instance. Quote Link to comment Share on other sites More sharing options...
Dice Posted May 9, 2017 Share Posted May 9, 2017 (edited) Wasnt this availabe in 1.2 ATTACKMODE RO_STORAGE ? This would render the entire storage readonly on a very low level. making just one folder read/writable would set the baselevel of readonly very hard. Edited May 9, 2017 by Dice Quote Link to comment Share on other sites More sharing options...
Dice Posted May 9, 2017 Share Posted May 9, 2017 Considering, you could alternate between the ATTACKMODE STORAGE and the ATTACKMODE RO_STORAGE in the script to allow the script to write data to the loaded partition/ datastore. however, i cannot predict how the OS (windows/linux) would react to the change between a readonly/writable partition and the required (?) reload Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.