Bash Bunny SSH?

[tad4shi]

Hi,

if I install avahi-daemon and put ATTACKMODE RNIDS_ETHER in something like .bashrc or .profile, can I SSH into the bunny with sudo ssh root@bunny.local? I greatly prefer SSH over serial so I would really like my method above to work. I don't own a bash bunny, although I might buy it at some point, I'm just considering.

 

Thanks!

[b0N3z]

just set a payload on switch 1 or 2 with RNIDS_ETHER and STORAGE

[tad4shi]

42 minutes ago, b0N3z said:

just set a payload on switch 1 or 2 with RNIDS_ETHER and STORAGE

Yeah, but then I waste a potential payload slot!

[Dave-ee Jones]

Make a new payload folder in the "payloads" directory and call it "arming". Then put a payload.txt folder in there that contains:

ATTACKMODE RNDIS_ETHERNET STORAGE

This means everytime you go into arming mode there will be the ETHERNET and STORAGE adapters running. MAKE SURE you don't get this wrong otherwise your arming mode is broken and you'll have to try one of your other payloads (one with STORAGE or something enabled) to recover your Bunny's arming mode OR if you can't do that you'll have to recover your Bunny.

[tad4shi]

4 minutes ago, Dave-ee Jones said:

Make a new payload folder in the "payloads" directory and call it "arming". Then put a payload.txt folder in there that contains:

ATTACKMODE RNDIS_ETHERNET STORAGE

This means everytime you go into arming mode there will be the ETHERNET and STORAGE adapters running. MAKE SURE you don't get this wrong otherwise your arming mode is broken and you'll have to try one of your other payloads (one with STORAGE or something enabled) to recover your Bunny's arming mode OR if you can't do that you'll have to recover your Bunny.

Then will I still have the two payload slots? Or will I use one of them?

[tad4shi]

Oh, sorry. I now get what you mean, thanks! Sorry for having to make you repeat the same stuff over and over again.

[b0N3z]

if all your doing is setting up the bunny for future attacks then why does it matter. change your payload when your done.