Hak5 Bash Bunny

From Embedded Lab Vienna for IoT & Security
Jump to navigation Jump to search

Summary

This documentation is about the Bash Bunny from Hak5. This device is an multi-purpose USB Attack platform.

Gain Access to the Bash Bunny

There are three main ways to gain access to the Bash Bunny:

  • from the File System
  • with an Serial Console Interface
  • with SSH

Serial Console Interface

The Serial Console Interface can be used when the Bash Bunny is in attack mode. It is independent from the operating system but the ways are different.

Windows (Putty)

Putty is the best way t access serial consoles when working on an Windows machine. Just download it on the manufacturer website and install it and follow the steps.

Step 1:

Get the comport by entering

[Windows key] device manager [enter] 

Extend the "Ports (COM & LPT) line and search for the "USB Serial Device(COM..)"

Step 2:

Open Putty and go to the Serial TAB and enter the following parameters:

Serial line to connect to COM..
Speed (baud) 115200
Data bits 8
Stop bits 1
Parity No
Flow control XON/XOFF

Go back to the session tab and check "Serial" and Open the Connection

hostname root
password hak5bunny


Enter these commands in the shell

echo foo
echo bar

Step 2

Make sure to read

  • War and Peace
  • Lord of the Rings
  • The Baroque Cycle

Used Hardware

Device to be used with this documentation Maybe another device to be used with this documentation

Courses

References

Category:Pentesting