hak5 / bashbunny-payloads

The Official Bash Bunny Payload Repository
https://bashbunny.com
2.64k stars 1.47k forks source link

Organize payloads by platform #79

Open ericfri opened 7 years ago

ericfri commented 7 years ago

After looking through the payloads, it's not always imeediatly obvious which platform the payload is for. I think it would make sense to organize them into Windows/Linux/Mac/Other folders.

Biocow commented 7 years ago

Agreed. I've been digging through what is there so far looking for the mac ones. Some of them are labeled, but some are not. Organized by folder might be cleaner.

sebkinne commented 7 years ago

After a conversation with @hak5darren, we will probably be reorganizing all payloads to match the following pattern: /category/{win,osx,linux,multi}_NameOfPayload. See examples below:

/exfiltration/win_smb_exfiltrator /exfiltration/win_usb_exfiltrator /exfiltration/osx_usb_SmacAndGrab /exfiltration/multi_BunnyTap /enumeration/osx_macinfograbber /credentials/win_WiPassDump /credentials/multi_QuickCreds /prank/win_90sMode

mrt0mat0 commented 7 years ago

why not fully adopt the msf structure and make the OS its own folder? also, should you maybe decide on coding standards for folders and such? camel case mixed with snake case is ugly. clean code is happy code :)

rothgar commented 7 years ago

+1 for top level folders instead of individual names.

bg-wa commented 7 years ago

I started this branch, based on conversation here:

https://github.com/bg-wa/bashbunny-payloads/tree/feature/issue_79

I hesitate to add top level folders for each platform, as I think the attack surface for this this device is much more diverse than than {win,osx,linux,multi}.

No PR, just fleshing out an idea. All files are the just reorganized from master, except an example playload (multi_hid_storage_example.txt), I wrote to demo to a friend.

mrt0mat0 commented 7 years ago

yes, but you almost always start your attack based on machine OS type. you don't say, oh i want to steal this password, you say, oh i have a linux/max/windows. what can i do to it with my bash bunny to take control? Besides, the attack surface isn't any larger than MSF, is it?

On Sun, Mar 26, 2017 at 7:20 PM, bg-wa notifications@github.com wrote:

I started this branch, based on conversation here:

https://github.com/bg-wa/bashbunny-payloads/tree/feature/issue_79

I hesitate to add top level folders for each platform, as I think the attack surface for this this device is much more diverse than than {win,osx,linux,multi}.

No PR, just fleshing out an idea. All files are the just reorganized from master, except an example playload (multi_hid_storage_example.txt), I wrote to demo to a friend.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/hak5/bashbunny-payloads/issues/79#issuecomment-289324912, or mute the thread https://github.com/notifications/unsubscribe-auth/AQSQRqyweL6sZcvoFKTc_5WbqMAYbxSZks5rpvLFgaJpZM4Mh0gR .

bg-wa commented 7 years ago

Ha, I guess that does make sense... It is not larger than MSF.

Sneakypoke commented 1 year ago

So I take it nothing happened with regards to the new structure?