Jump to content

Trojans and HackTool Issues Identified post payload update


Recommended Posts

I am just getting started with the Bash Bunny, and it's payloads... so pardon me... but should I be concerned with the "Threats" identified by Windows Defender when I updated the payloads using the auto updater?

I'm not sure if these are actually part of the payload that I need, or a potential nefarious attack on my or others system. Any comments would be appreciated. Thanks!


file: H:\.payload_repo\payloads\library\credentials\DumpCreds\PS\invoke-m1m1k@tz.ps1


file: H:\.payload_repo\payloads\library\exfiltration\browserData\Get-BrowserData.ps1


file: H:\.payload_repo\payloads\library\remote_access\USB_Intruder\USB_Intruder\shell.bat



Link to comment
Share on other sites

AV will trigger because the payloads that are copied to the BB are tagged as bad by AVs.  Mimikatz is a password grabber bit is a payload for the BB to get passwords.  so, yelp it will trigger bit if you are using the updater from the official site then it will just be copying them to the BB.


If you are worried, you can always do the updating manually.

Link to comment
Share on other sites

Not so much worried about the auto updater per se, I was more worried about the actual contents of some of the payloads, being a noob and all, and not knowing if those items were supposed to be in the files. Thanks for the clarification 🙂

Link to comment
Share on other sites


This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Create New...