Bunnypicker (Win10 Lockpicker for Bash Bunny)

[alexszilagyi]

Hi there guys,

I have some questions:
1. What does JtR means?

2. Where do I run the following commands? In Windows, on the Setup machine (a Windows where I setup the BashBunny USB stick) ?

Based on what I have seen, the below commands can be run on a Windows Machine with Linux subsystem activated (WSL2). Am I missing something?

I would like to adjust the documentation as soon as I get some clarifications on my questions.

## Requirements

Responder must be in /tools/responder/
(Can be otained from https://forums.hak5.org/topic/40971-info-tools/)
JtR must be in /tools/john
Requires initial setup (below)

## Initial Setup
Install responder from https://forums.hak5.org/topic/40971-info-tools/

Replace /etc/apt/sources.list with:
deb http://archive.debian.org/debian/ jessie main non-free contrib
deb-src http://archive.debian.org/debian/ jessie main non-free contrib
deb http://archive.debian.org/debian-security/ jessie/updates main non-free contrib
deb-src http://archive.debian.org/debian-security/ jessie/updates main non-free contrib

apt update (DO NOT RUN apt upgrade as it will break RNDIS_ETHERNET. Not entirely clear why.)

The john package included can't handle NTLM hashes so we will make our own. 
Install gcc and git if you don't have them.

apt-get install gcc

apt-get install git
git config --global http.sslverify "false" (this is insecure but I'm not worried)

git clone https://github.com/openwall/john

cd john
./configure && make
mv run /tools/john
cd ..
rm -r john (not required but a space saving measure)

[rf-bandit]

jtr means john the ripper. all of the commands are to be run on the bash bunny.