Bash Bunny Exploits

Summary

This is a DRAFT. The Hak5 Bash Bunny will be used for various exploits which will be explained, documented and evaluated in the following chapters.

Requirements

• Operating system: Ubuntu 18.04 bionic amd64, Windows 10
• Hardware: Hak5 Bash Bunny

In order to get a general idea about the Bash Bunny, please refer to Hak5 Bash Bunny or the official Hak5 Documentation and Git repository.

Exploits

Reverse shell on Linux

For this exploit, the Linux Reverse Shell payload is used, which is in the remote access category on Bash Bunny's Git Repository.

bashbunny-payloads/payloads/library/remote_access/LinuxReverseShell

References

• https://docs.hak5.org/hc/en-us/categories/360000982534-Bash-Bunny
• https://github.com/hak5/bashbunny-payloads
• https://youtu.be/JlGSuQ21Vt8
• https://www.youtube.com/watch?v=LtqsKftRFiw