Undercover bunny payload purpose

[Jsync]

What's the purpose of the undercover bunny payload all it does is make a wifi ap out of a target machine. It is in the remote access section so does it have any other purpose other than use img someone else's machine for Internet?

[m40295]

Once the attacker is connected remotely thru wifi he can perform attacks.   

Arp spoofing. Nmap scanning for open ports 

providing remote access thru wifi 

[Jsync]

I have heard of arp spoofing what exactly is it, does it stop wifi packets or something also what else besides what you have mentioned can be done through the the remote access wifi 

[m40295]

 

https://en.m.wikipedia.org/wiki/ARP_spoofing 

My recommendation is for you to start searching and learning.  

Then build yourself a lab.   vmware install a windows os and a kali os.  Create a virtural network and try some things out.     Remeber the command. Man.   example.  Man arp.   Will show you the manual of arp.    

 

being in remote access. Is exactly what it does 

[Dave-ee Jones]

I've found something slightly more useful with that payload. You can change the adapter that the AP bridges from, so you can change it to the Bunny's adapter and therefore turn the Bunny's network into a WiFi network. That means that you can connect to it and SSH into your Bunny, allowing you to remotely launch payloads and stuff. Or you could just troll whoever's at the PC by inputting random HID keystrokes.

Can you imagine the chaos of them writing something in Word or writing up an email and you're just spamming a letter or sending it early everytime, haha.