Bash Bunny

Geofencing for the Bash Bunny Mark II

Hotplug attacks are great, until they're not — which is why it's important to limit the scope of engagement. Thankfully the Bash Bunny Mark II can do this with a geofencing feature using bluetooth signals to prevent payloads from running unless it's certain to be in the defined area.

Remote Triggers for the Bash Bunny Mark II

Bash Bunny Remote Trigger

One of the greatest new features of the Bash Bunny Mark II is remote triggers. With this, a payload — or multiple stages of a payload — can be triggered from afar. These can be done with any bluetooth low-energy device, including most smartphones. In this article I'll demonstrate how to use this handy new feature.

Getting Root on a Bash Bunny from the Serial Console

Bash Bunny

Throughout the history of personal computers, serial has been a mainstay for file transfer and console access. To this day it’s widely used, from headless servers to embedded microcontrollers. With the Bash Bunny, we’ve made it convenient as ever – without the need for a serial-to-USB converter.

Top 5 file stealing "exfiltration" payloads for the Bash Bunny

Bash Bunny

As anyone in IT knows, two is one — one is none. It’s important to backup your documents. As a pentesters know, exfiltration is a fancy word for an involuntary backup. To that end, the Bash Bunny features at storage attack mode capable of intelligent exfiltration with gigs of high speed storage.

Writing Keystroke Injection payloads for the Bash Bunny

Bash Bunny

Computers trust humans. Humans interact with keyboards. Hence the Human Interface Device or HID standard used by all modern USB keyboards. To a computer, if the device says it’s a keyboard — it’s a keyboard. So when our Bash Bunny says 'I'm a Keyboard'... You can see where this is going.

The Hottest Bash Bunny Hot Plug Attack: Network Hijacking

Bash Bunny

Exploiting local network attack vectors, the Bash Bunny emulates specialized Ethernet adapters. This network of two (the Bash Bunny and your target) provides direct access to the target – bypassing any would-be firewalls, countermeasures or intrusion detection systems from the legitimate LAN.

Bash Bunny

Geofencing for the Bash Bunny Mark II

Remote Triggers for the Bash Bunny Mark II

Getting Root on a Bash Bunny from the Serial Console

Top 5 file stealing "exfiltration" payloads for the Bash Bunny

Writing Keystroke Injection payloads for the Bash Bunny

The Hottest Bash Bunny Hot Plug Attack: Network Hijacking

Guides

Documentation

Thank You!

Thank You!

Geofencing for the Bash Bunny Mark II

Remote Triggers for the Bash Bunny Mark II

Getting Root on a Bash Bunny from the Serial Console

Top 5 file stealing "exfiltration" payloads for the Bash Bunny

Writing Keystroke Injection payloads for the Bash Bunny

The Hottest Bash Bunny Hot Plug Attack: Network Hijacking

Guides

Documentation

Thank You!

SIGN UP TODAY

Thank You!