* Removed the paranoia mount. we don't need to test that the kernel
is doing it's job when mounting fstab
* Moved git log location to persist
* Edited ignore loop to include hidden directories
* removed the paranoia mount. we don't need to test that the kernel
is doing it's job when mount fstab
* log to a persistent location
* edited ignore loop to include hidden directories
This payload was made in collaboration with audibleblink through irc. We both came up with the same idea, but I took it a step further, by adding a git-pull/update after the first payload execution. Original repo at https://github.com/mathew-fleisch/Git-Bunny-Git
- fixes lootdir path
- dont capitalize var names that aren't exported
- indentation
- escape shell characters that are passed to QUACK
- account for variable copy times by joining cp and exit commands
- sync the disk
by the use of bunny_helpers.sh possible problems with the command "find" are avoided. If the user only copies the payload from the library folder then find will find two destinations for the portal.html and therefore the script will fail.
Within the forum https://forums.hak5.org/index.php?/topic/40237-install-tools/
there were several problems mentioned which are solved with this update:
1. No need to move instead of copying tools_to_install to the switch directory due to use of bunny_helpers.sh
2. Check if everything is copied works even when the user OS has added hidden files (removing hidden files before test)
This payload executes a VBScript as the payload. The sample VBScript creates a netcat reverse shell, but any VBScript can be substituted. netcat.exe must be sourced elsewhere.
A simple script to create a netcat reverse shell. For Red Teamers - you can auto_increment the listener port by setting a flag to true in payload.txt. netcat.exe is not included and must be sourced elsewhere.
Removing STORAGE from this example payload.txt will prevent confusion among new users. Windows doesn't handle the combination RNDIS_ETHERNET with STORAGE the right way, it gives a driver error because Windows is seeing it as a composite device.