DarkCharlie

DarkCharlie
Download Copy
Title: DarkCharlie
Author: michael-weinstein

This payload creates a folder, places a Python wrapper for SSH inside, and runs an initialization function that sets environmental values while saving SSH credentials and private keys in JSON format.

Credential harvesting is the method of obtaining credentials — think usernames and passwords. Many techniques are used to obtain credentials, from keylogging to credential dumping. With a set of credentials in hand, red teamers may access systems and make lateral movement across the network, as well as creating their own credentials which may be difficult to detect in a breach. See all credential payloads.

This payload is for the Bash Bunny. Simultaneously mimic multiple trusted devices to trick targets into divulging sensitive information without triggering defenses. The Bash Bunny is truly the world's most advanced USB attack platform.

Submit your own payload, or browse more featured Bash Bunny Payloads.

 

 

Related Payloads

BlueBunny
BlueBunny
BlueBunny is a C2 solution that communicates directly over Bluetooth-Low-Energy with your Bash Bunny Mark II. Send your
Read More
SleepyMacRick
SleepyMacRick
Installs a script that will listen for user activity in the background. When the user starts working on the machine, a R
Read More
MacAlertPhisher
MacAlertPhisher
Creates a customizable alert that prompts for the victim's credentials and shares them with you via Discord.
Read More