Hack 5 gear loot - can be recovered!

[Struthian]

While fooling around with Bash Bunny PasswordGrabber and Lazagna, I was testing it on a variety of computers in my home.  I deleted the passwords.txt files (of course) and then realized something - what about freespace recovery?   Indeed, all those deleted password files for basically every password I have or ever had - was on my bunny.   If your bunny is hacked and those files recovered - could be a big problem.  This could also happen forensically if some agency gets a hold of it

One solution is to use the DOS CMD to run Cipher /W:bunnydrivename .  This will wipe the free space of your bunny drive.  Faster (and good enough?) cipher  /w:bunnydrive\loot  

A cool tool to include would encrypt files or a directory and, wipe the files content at one go.  Any ideas?

 

Edited November 25, 2017 by Struthian
additional usage of cipher

[Rkiver]

Hi there,

 

Looks like you are asking a question about an item that Hak5 sells.

Each item they make and sell has it's own section in the forums.

You asked about The Bash Bunny: https://forums.hak5.org/forum/92-bash-bunny/

[Glowinghot666]

good to keep in mind

[Dave-ee Jones]

On 11/26/2017 at 4:38 AM, Struthian said:

One solution is to use the DOS CMD to run Cipher /W:bunnydrivename .  This will wipe the free space of your bunny drive.  Faster (and good enough?) cipher  /w:bunnydrive\loot  

A cool tool to include would encrypt files or a directory and, wipe the files content at one go.  Any ideas?

Use one of the switches as a self-destruct payload?

Or just use the factory reset method (plug and unplug 3 times).