quentin_lamamy Posted August 22, 2017 Share Posted August 22, 2017 (edited) Hi, It seems that lot of bb user are noob and don't succeed in using it. I am working on a tool based on node js with a terminal ui to manage the BB. The actual feature are : Browse available payload from git Install / Remove payload Update firmware Browse available tool from git Install / Remove payload Is there some other feature that can be usefull ? Message for the moderator : Is this possible to stick this post to let people work on it without scrolling in forum history ? Edited September 15, 2017 by quentin.lamamy Quote Link to comment Share on other sites More sharing options...
Dave-ee Jones Posted August 22, 2017 Share Posted August 22, 2017 Sounds interesting, but the new BB Updater solves the problem of downloading payloads and updates. And there are a few payloads that can help you manage or swap out your payloads while your payload is running (e.g. my WabbitWeb or BBTPS, there are a few others but can't remember them off the top of my head). Browsing payloads/tools from Github and downloading specific ones could be useful but I don't see how downloading the whole repo is a bad idea, as it's small anyway. However it sounds interesting and could be nice to use. Though it sounds like we're going to need JavaScript to use it..does that mean it's based on a webserver? Quote Link to comment Share on other sites More sharing options...
quentin_lamamy Posted August 22, 2017 Author Share Posted August 22, 2017 5 minutes ago, Dave-ee Jones said: Sounds interesting, but the new BB Updater solves the problem of downloading payloads and updates. I don't know what is bb updater, sorry for the duplicate idea :/ 6 minutes ago, Dave-ee Jones said: Browsing payloads/tools from Github and downloading specific ones could be useful but I don't see how downloading the whole repo is a bad idea, as it's small anyway. Nop there is two choice, a third party api i host on my server to get info about the git or just parse the github 11 minutes ago, Dave-ee Jones said: However it sounds interesting and could be nice to use. Though it sounds like we're going to need JavaScript to use it..does that mean it's based on a webserver? It's a node js app, so just need a node js. It can be use as a classic payload that run the tool, or in the bashbunny filesystem with a custom command binded to the tool. Like setup or something like that. Quote Link to comment Share on other sites More sharing options...
Sebkinne Posted August 22, 2017 Share Posted August 22, 2017 It's one of the things on my to-do list too. A nice webinterface to manage and configure payloads. Quote Link to comment Share on other sites More sharing options...
quentin_lamamy Posted August 22, 2017 Author Share Posted August 22, 2017 maybe i can help you on this point, i'm a full stack web dev. You already know what you want ? Which techno etc ? Quote Link to comment Share on other sites More sharing options...
Dave-ee Jones Posted August 22, 2017 Share Posted August 22, 2017 (edited) 46 minutes ago, Sebkinne said: It's one of the things on my to-do list too. A nice webinterface to manage and configure payloads. :O Has NO ONE seen WabbitWeb... 2 hours ago, quentin.lamamy said: I don't know what is bb updater, sorry for the duplicate idea :/ This is Sebkinne's Updater: Â Edited August 22, 2017 by Dave-ee Jones 1 Quote Link to comment Share on other sites More sharing options...
Sebkinne Posted August 22, 2017 Share Posted August 22, 2017 32 minutes ago, quentin.lamamy said: maybe i can help you on this point, i'm a full stack web dev. You already know what you want ? Which techno etc ? Thanks, that's appreciated! I'll post more information once I get some time for the Bunny again.  3 minutes ago, Dave-ee Jones said: Has NO ONE seen WabbitWeb... I have seen it, but what we have planned will translate to other products as well in the future. Saying that, one does not negate the other. 1 Quote Link to comment Share on other sites More sharing options...
quentin_lamamy Posted August 22, 2017 Author Share Posted August 22, 2017 1 minute ago, Sebkinne said: Thanks, that's appreciated! I'll post more information once I get some time for the Bunny again. Ok, take your time i will work on my side on project to learn more and more on BB. Feel free to send me a PM Quote Link to comment Share on other sites More sharing options...
quentin_lamamy Posted September 15, 2017 Author Share Posted September 15, 2017 (edited) @Sebkinne I continue my work and make a test making a packaged node js app installed on the user computer. Because i like terminal based ui i make this :  1) the doc, the changelog, the status of the software (up to date or not) , the author and contrinbutor. (look at the attached file) 2) allow you to paire your bb with the software (manage payload and extension profiles and maybe more) 3) manage payload, browse repository, display payload description ,install , uninstal, check update and maybe more. 4) the same for the extension 5) Help, maybe faq Any other idea ?   bash Bunny Manager.tiff Edited September 15, 2017 by quentin.lamamy 1 Quote Link to comment Share on other sites More sharing options...
PoSHMagiC0de Posted September 15, 2017 Share Posted September 15, 2017 I think a web manager is on everyone list haha. Â It is on my list eventually for bbtps. Â I think Davee is the only one to beat us to the punch with some kind of web manager. Â Bbtps is nodejs (with express, soon to remove express for vanilla http module), the server that runs on the bunny is. Â I use powershell as the agent and payload preference. Â Quote Link to comment Share on other sites More sharing options...
Dave-ee Jones Posted September 18, 2017 Share Posted September 18, 2017 On 9/16/2017 at 6:44 AM, PoSHMagiC0de said: I think a web manager is on everyone list haha. Â It is on my list eventually for bbtps. Â I think Davee is the only one to beat us to the punch with some kind of web manager. Â Bbtps is nodejs (with express, soon to remove express for vanilla http module), the server that runs on the bunny is. Â I use powershell as the agent and payload preference. Â Actually I think even I was beaten to the punch. It was a while ago (as was WabbitWeb), but BrowserBunny was a thing. Quote Link to comment Share on other sites More sharing options...
quentin_lamamy Posted August 1, 2023 Author Share Posted August 1, 2023 (edited) It's a still a need ? Can work on it. My idea is : A node js local agent or a local app (as you want) Add on the website install button that post to an url like bashbunny://payload/install , this king of button could be added to payload studio  Edited August 1, 2023 by quentin_lamamy Quote Link to comment Share on other sites More sharing options...
Solution dark_pyrro Posted August 1, 2023 Solution Share Posted August 1, 2023 (edited) There might be inhouse plans since the new Mk2 Packet Squirrel comes with a web UI in the same design (more or less) as the WiFi Pineapple. Not sure if it will reach the Bunny though. The idea is good, but there's one "obstacle"; the Bunny doesn't naturally do networking. Arming mode is serial and storage and you have to craft a payload to get networking up and running and that also depends on the target OS (RNDIS or ECM). Most beginners are probably using Windows, so RNDIS would perhaps be the most common. Mac is however also a "beginner option" and that requires ECM (AUTO_ETHERNET can be used though). My guess is that if this is going to be the beginner friendly option there needs to be some changes to how the Bunny operates out of the box to make it really smooth. Networking support is key to get this working. Perhaps a new fw release with new option(s) to the config file where you can set "WEB_UI ENABLED" (or such). Another thing to consider developing some kind of support for is to get the Bunny online via ICS in the simplest way possible (and without making the "proxy machine" being internet-less in the process which happens in a lot of the cases). Edited August 1, 2023 by dark_pyrro Quote Link to comment Share on other sites More sharing options...
quentin_lamamy Posted August 1, 2023 Author Share Posted August 1, 2023 (edited) 2 hours ago, dark_pyrro said: There might be inhouse plans since the new Mk2 Packet Squirrel comes with a web UI in the same design (more or less) as the WiFi Pineapple. Not sure if it will reach the Bunny though Need a staff info, don't know who know the roadmap  2 hours ago, dark_pyrro said: The idea is good, but there's one "obstacle"; the Bunny doesn't naturally do networking More simple, just use arming mode and use the OS mount point to transfer file for ex on osx /Vollumes/Bashbunny Edited August 1, 2023 by quentin_lamamy Quote Link to comment Share on other sites More sharing options...
dark_pyrro Posted August 1, 2023 Share Posted August 1, 2023 OK, no server needed Quote Link to comment Share on other sites More sharing options...
quentin_lamamy Posted August 1, 2023 Author Share Posted August 1, 2023 (edited) Need a local server to make hack5 payload "store" communicate with the bashbuny So that we can have an install button on for example (or in payload studio) Edited August 1, 2023 by quentin_lamamy Quote Link to comment Share on other sites More sharing options...
dark_pyrro Posted August 1, 2023 Share Posted August 1, 2023 Local server where? On the machine that the Bunny is connected to? Quote Link to comment Share on other sites More sharing options...
quentin_lamamy Posted August 1, 2023 Author Share Posted August 1, 2023 (edited) yes Edit: After some check seems possible without server, just register the custom protocol and do thing, will make a test after my work day Edited August 1, 2023 by quentin_lamamy Quote Link to comment Share on other sites More sharing options...
quentin_lamamy Posted August 1, 2023 Author Share Posted August 1, 2023 (edited) and if custom protocol don't work, local agent running a web server do the work OR a regular desktop app or shell script Edited August 1, 2023 by quentin_lamamy Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.