bashbunny tool Bash Bunny Manager

[quentin_lamamy]

Hi,

It seems that lot of bb user are noob and don't succeed in using it. I am working on a tool based on node js with a terminal ui to manage the BB.

The actual feature are :

• Browse available payload from git
• Install / Remove payload
• Update firmware
• Browse available tool from git
• Install / Remove payload

Is there some other feature that can be usefull ?

Message for the moderator : Is this possible to stick this post to let people work on it without scrolling in forum history ?

Edited September 15, 2017 by quentin.lamamy

[Dave-ee Jones]

Sounds interesting, but the new BB Updater solves the problem of downloading payloads and updates. And there are a few payloads that can help you manage or swap out your payloads while your payload is running (e.g. my WabbitWeb or BBTPS, there are a few others but can't remember them off the top of my head).

Browsing payloads/tools from Github and downloading specific ones could be useful but I don't see how downloading the whole repo is a bad idea, as it's small anyway.

However it sounds interesting and could be nice to use. Though it sounds like we're going to need JavaScript to use it..does that mean it's based on a webserver?

[quentin_lamamy]

5 minutes ago, Dave-ee Jones said:

Sounds interesting, but the new BB Updater solves the problem of downloading payloads and updates.

I don't know what is bb updater, sorry for the duplicate idea :/

6 minutes ago, Dave-ee Jones said:

Browsing payloads/tools from Github and downloading specific ones could be useful but I don't see how downloading the whole repo is a bad idea, as it's small anyway.

Nop there is two choice, a third party api i host on my server to get info about the git or just parse the github

11 minutes ago, Dave-ee Jones said:

However it sounds interesting and could be nice to use. Though it sounds like we're going to need JavaScript to use it..does that mean it's based on a webserver?

It's a node js app, so just need a node js. It can be use as a classic payload that run the tool, or in the bashbunny filesystem with a custom command binded to the tool. Like setup or something like that.

[Sebkinne]

It's one of the things on my to-do list too. A nice webinterface to manage and configure payloads.

[quentin_lamamy]

maybe i can help you on this point, i'm a full stack web dev. You already know what you want ? Which techno  etc ?

[Dave-ee Jones]

46 minutes ago, Sebkinne said:

It's one of the things on my to-do list too. A nice webinterface to manage and configure payloads.

:O Has NO ONE seen WabbitWeb...

2 hours ago, quentin.lamamy said:

I don't know what is bb updater, sorry for the duplicate idea :/

This is Sebkinne's Updater:

 

Edited August 22, 2017 by Dave-ee Jones

[Sebkinne]

32 minutes ago, quentin.lamamy said:

maybe i can help you on this point, i'm a full stack web dev. You already know what you want ? Which techno  etc ?

Thanks, that's appreciated! I'll post more information once I get some time for the Bunny again.

 

3 minutes ago, Dave-ee Jones said:

Has NO ONE seen WabbitWeb...

I have seen it, but what we have planned will translate to other products as well in the future. Saying that, one does not negate the other.

[quentin_lamamy]

1 minute ago, Sebkinne said:

Thanks, that's appreciated! I'll post more information once I get some time for the Bunny again.

Ok, take your time i will work on my side on project to learn more and more on BB. Feel free to send me a PM

[quentin_lamamy]

@Sebkinne I continue my work and make a test making a packaged node js app installed on the user computer. Because i like terminal based ui i make this :

 

• 1) the doc, the changelog, the status of the software (up to date or not) , the author  and contrinbutor. (look at the attached file)
• 2) allow you to paire your bb with the software (manage payload and extension profiles  and maybe more)
• 3) manage payload, browse repository, display payload description ,install , uninstal, check update  and maybe more.
• 4) the same for the extension
• 5) Help, maybe faq

Any other idea ?

 

 

bash Bunny Manager.tiff

Edited September 15, 2017 by quentin.lamamy

[PoSHMagiC0de]

I think a web manager is on everyone list haha.  It is on my list eventually for bbtps.  I think Davee is the only one to beat us to the punch with some kind of web manager.  Bbtps is nodejs (with express, soon to remove express for vanilla http module), the server that runs on the bunny is.  I use powershell as the agent and payload preference.

 

[Dave-ee Jones]

On 9/16/2017 at 6:44 AM, PoSHMagiC0de said:

I think a web manager is on everyone list haha.  It is on my list eventually for bbtps.  I think Davee is the only one to beat us to the punch with some kind of web manager.  Bbtps is nodejs (with express, soon to remove express for vanilla http module), the server that runs on the bunny is.  I use powershell as the agent and payload preference.

 

Actually I think even I was beaten to the punch. It was a while ago (as was WabbitWeb), but BrowserBunny was a thing.

[quentin_lamamy]

It's a still a need ? Can work on it.

My idea is : 

• A node js local agent or a local app (as you want)
• Add on the website install button that post to an url like bashbunny://payload/install , this king of button could be added to payload studio

 

Edited August 1, 2023 by quentin_lamamy

[dark_pyrro]

There might be inhouse plans since the new Mk2 Packet Squirrel comes with a web UI in the same design (more or less) as the WiFi Pineapple. Not sure if it will reach the Bunny though. The idea is good, but there's one "obstacle"; the Bunny doesn't naturally do networking. Arming mode is serial and storage and you have to craft a payload to get networking up and running and that also depends on the target OS (RNDIS or ECM). Most beginners are probably using Windows, so RNDIS would perhaps be the most common. Mac is however also a "beginner option" and that requires ECM (AUTO_ETHERNET can be used though). My guess is that if this is going to be the beginner friendly option there needs to be some changes to how the Bunny operates out of the box to make it really smooth. Networking support is key to get this working. Perhaps a new fw release with new option(s) to the config file where you can set "WEB_UI ENABLED" (or such). Another thing to consider developing some kind of support for is to get the Bunny online via ICS in the simplest way possible (and without making the "proxy machine" being internet-less in the process which happens in a lot of the cases).

Edited August 1, 2023 by dark_pyrro

[quentin_lamamy]

2 hours ago, dark_pyrro said:

There might be inhouse plans since the new Mk2 Packet Squirrel comes with a web UI in the same design (more or less) as the WiFi Pineapple. Not sure if it will reach the Bunny though

Need a staff info, don't know who know the roadmap
 

2 hours ago, dark_pyrro said:

The idea is good, but there's one "obstacle"; the Bunny doesn't naturally do networking

More simple, just use arming mode and use the OS mount point to transfer file for ex on osx /Vollumes/Bashbunny

Edited August 1, 2023 by quentin_lamamy

[dark_pyrro]

OK, no server needed

[quentin_lamamy]

Need a local server to make hack5 payload "store" communicate with the bashbuny

So that we can have an install button on for example (or in payload studio)

Edited August 1, 2023 by quentin_lamamy

[dark_pyrro]

Local server where? On the machine that the Bunny is connected to?

[quentin_lamamy]

yes

Edit: After some check seems possible without server, just register the custom protocol and do thing, will make a test after my work day

Edited August 1, 2023 by quentin_lamamy

[quentin_lamamy]

and if custom protocol don't work, local agent running a web server do the work

OR a regular desktop app or shell script

Edited August 1, 2023 by quentin_lamamy