Bash Bunny Mark II

<h2> <span style="color: #cc0000;"><strong></strong></span><strong>Introduction</strong> </h2> <p>If you can physically access a device, the<strong> Hak5 Bash Bunny</strong> will get you electronic access. In short - it's the world's most powerful USB Attack Platform.</p> <p>In detail, it is a cross-platform, multi-payload, multi-tool capable of simultaneously emulating and abusing devices trusted by devices - input devices, storage devices, network devices.</p> <p>Disguised as a normal USB-drive, infinitely configurable, and backed by the Hak5 payload repository, the Bash Bunny is a one-stop physical hacking tool.</p> <p>This is the <strong>Mark II</strong>, which includes <strong>wireless geofencing, remote triggers, microSD support</strong> and <strong>faster performance!</strong><br></p> <h2><strong>Platform Overview <br></strong></h2> <p>Regardless of operating system (MacOS, Linux, Windows, Android) - all modern devices implement the notion of <em>trusted devices - </em>that is devices that a system will automatically trust and accept <em>without the need for confirmation</em> or drivers.</p> <p>There are several categories of Trusted Devices, including:</p> <ul> <li>HID ("Human Input Devices") - Keyboards, Mice, etc</li> <li>Storage Devices - Flash drives, etc</li> <li>Network Devices - Ethernet Adaptors, etc</li> </ul> <p>The Bash Bunny can emulate all these devices, simultaneously - and then abuse this trust via scriptable Payloads.</p> <p>Easily write or customise your own payload, or use one of the hundreds available in the Bash Bunny repository.</p> <p>Multiple payloads can be stored and selected via physical switch. The RGB LED provides instantaneous, covert feedback on the payload status.</p> <p>The Bash Bunny is a powerful quad-core fully-featured Linux machine in a tiny package - accessible over serial interface.</p> <p>Although it is infinitely configurable, common use cases include:</p> <div style="margin: 2em 3em;" class="grid"> <div class="grid-item small--one-whole medium--one-whole large--one-half text-center"> <h3>Network Infiltration</h3> <p>Automatically trusted by locked or unlocked devices as the best network device. Perform QuickCreds attacks. Completely cross-platform (RNDIS &amp; ECM) - backed by a full TCP/IP stack and root-access Linux.</p> </div> <div class="grid-item small--one-whole medium--one-whole large--one-half text-center"> <h3>Keystroke Injection</h3> <p>Leverage Keystroke Injection with storage emulation to automatically install payloads, exfiltrate data and more. <br>The full-featured scripting language provides a huge attack surface.</p> </div> <div class="grid-item small--one-whole medium--one-whole large--one-half text-center"> <h3>Data Exfiltration</h3> <p>MicroSD storage allows for rapid exfiltration of essentially unlimited amounts of data and ample space for delivering binary &amp; staged payloads.</p> </div> <div class="grid-item small--one-whole medium--one-whole large--one-half text-center"> <h3>GeoFencing</h3> <p>Prevent payloads from triggering off-site; activate payloads for specific geo-zones; destroy loot based on location.</p> </div> <div class="grid-item small--one-whole medium--one-whole large--one-half text-center"> <h3>Remote Triggers</h3> <p>Trigger payloads, macros and exfiltration discretely and remotely via smartphone app or <i>any</i> Bluetooth device! Trigger manually or trigger via proximity.</p> </div> <div class="grid-item small--one-whole medium--one-whole large--one-half text-center"> <h3>Root CLI Access</h3> <p>The Bash Bunny provides a permanent root console over serial - dropping you onto to a fully-featured Linux machine.</p> </div> </div> <div class="grid"> <div class="grid-item small--one-half medium--one-half large--one-half text-left"> <h2><strong>What's included</strong></h2> <ul> <li>1x Hak5 Bash Bunny</li> <li>1x Quick-Start Guide</li> <li>1x Bash Bunny Sticker</li> </ul> <h2><strong>Technical Specifications<br></strong></h2> <ul> <li>Weight: 30g<br><br> </li> <li>Quad-core ARM Cortex A7</li> <li>8 GB SLC NAND Disk</li> <li>MicroSD XC (Supports up to 2TB)</li> <li>BLE Connectivity</li> <li>1x RGB LED</li> <li>1x 3-position switch</li> </ul> <meta charset="utf-8"> <h2><strong>Shipping &amp; Packaging</strong></h2> <ul> <li>Each Bash Bunny is dispatched from <strong>Europe</strong> - no need to worry about slow shipping times, import duties or damaged goods.</li> <li>Packed in a sturdy compact 85x130x45mm box.</li> <li>We provide worldwide shipping with express options.</li> </ul> </div> <div class="grid-item small--one-half medium--one-half large--one-half text-left"> <h2><strong>Bash Bunny Technical Resources</strong></h2> <strong>Tutorials &amp; Guides</strong> <ul> <li> <a href="https://docs.hak5.org/bash-bunny/getting-started/" target="_blank">Getting Started</a> <em>(5 Articles)</em> </li> <li> <a href="https://docs.hak5.org/bash-bunny/beginner-guides/" target="_blank">Beginner Guides</a> <em>(6 Articles)</em> </li> <li> <a href="https://docs.hak5.org/bash-bunny/internet-connectivity/">Internet Connectivity</a> <em>(4 Articles)</em> </li> <li> <a href="https://docs.hak5.org/bash-bunny/software-updates/" target="_blank">Updating the Bash Bunny</a> <em>(3 Articles)</em> </li> <li> <a href="https://docs.hak5.org/bash-bunny/writing-payloads/" target="_blank">Payloads and Payload Development</a><em> (10 Articles)</em> </li> <li> <a href="https://docs.hak5.org/bash-bunny/video-guides/" target="_blank">Video Guides</a> <em>(11 Articles)</em> </li> <li> <a href="https://docs.hak5.org/bash-bunny/troubleshooting/" target="_blank">FAQ / Troubleshooting</a> <em>(2 Articles)</em> </li> </ul> <strong>Community Resources</strong> <ul> <li><a href="https://github.com/hak5/bashbunny-payloads" target="_blank">Hak5 Bash Bunny Payload Repository</a></li> <li><a href="https://forums.hak5.org/forum/92-bash-bunny/" target="_blank">Bash Bunny Forum</a></li> <li><a href="https://wiki.bashbunny.com/#!index.md" target="_blank">Bash Bunny Wiki</a></li> </ul> <h2><strong>Compatible Systems</strong></h2> <ul> <li>Windows: XP, 7, 8, 10 (All Versions)</li> <li>OS/X: 10.0 - 10.7 (All Versions)</li> <li>Linux: Debian, Ubuntu, CentOS, etc (All Versions)</li> <li>Android: Requires USB / OTG Support</li> </ul> </div> </div> <div> <h2>Bash Bunny Mark II - Overview</h2> <figure><lite-youtube videoid="-UmvZdDxCiI" posterquality="maxresdefault"></lite-youtube></figure> <h2>Getting Started - Exfiltrate Wifi Credentials</h2> <figure><lite-youtube videoid="6aeUnyLYOAE" posterquality="maxresdefault"></lite-youtube></figure> </div>