bashbunny Is it possible to open an admin powershell and run a script on a locked PC?

[Hamster]

Hello all, I have 4 headless PCs here at my house and I was wondering in the event the internet goes down and I need to do a file transfer or something. Could I just plug the bash bunny in and have it execute a powershell script so I don't have to find a spare monitor and keyboard? Thanks, new to the bashbunny.

[RazerBlade]

Yes you could if u know the password

Edited September 13, 2017 by RazerBlade

[Hamster]

I know the password but could I still do it without the password so it'd be faster? I mean I could just have it put the password and then auto lock the computer afterwards but each PC has a different password set. :/

[LowValueTarget]

Take a step back and think about what you are asking.

Ask it this way -- "Am I able to accomplish this with a keyboard, a mouse, a network accessible linux computer, a serial device, a usb ethernet adapater and a thumb drive?"

[Hamster]

7 hours ago, LowValueTarget said:

Take a step back and think about what you are asking.

Ask it this way -- "Am I able to accomplish this with a keyboard, a mouse, a network accessible linux computer, a serial device, a usb ethernet adapater and a thumb drive?"

Alright, am I able to do this by setting the bash bunny to an ethernet adapter to bypass the lock screen on windows to open a powershell then have it type the commands? Sorry new to all this still, gotta learn somewhere >.<

[Dave-ee Jones]

Okay, from your current understanding, can you open PowerShell on the lock screen with a keyboard and mouse?

• No. Well, at least not without playing with a multiboot USB/CD (have a Google around for the "sticky keys backdoor")

Can you open PowerShell with an ethernet adapter or a serial device?

• I can't think of any ways. However, you can grab credentials from a locked device using Responder or Metasploit or something along those lines.

Can you open PowerShell on a locked screen using a 2nd PC connected to the computer?

• Yes, if the second computer is a domain controller who 'owns' that PC (but, obviously, the Bash Bunny isn't, so No)

[Hamster]

10 hours ago, Dave-ee Jones said:

Okay, from your current understanding, can you open PowerShell on the lock screen with a keyboard and mouse?

• No. Well, at least not without playing with a multiboot USB/CD (have a Google around for the "sticky keys backdoor")

Can you open PowerShell with an ethernet adapter or a serial device?

• I can't think of any ways. However, you can grab credentials from a locked device using Responder or Metasploit or something along those lines.

Can you open PowerShell on a locked screen using a 2nd PC connected to the computer?

• Yes, if the second computer is a domain controller who 'owns' that PC (but, obviously, the Bash Bunny isn't, so No)

Darn, oh well...
Thanks anyways. :D

[Dave-ee Jones]

13 hours ago, ArcticWolf_11 said:

Darn, oh well...
Thanks anyways. :D

Yeah. Microsoft wouldn't be very smart if they allowed people to use PowerShell from the lock screen by default, haha. I think there are a few self-elevating techniques people could use to 'fake' being the Administrator and start ripping apart the PC from the lock screen, haha.