"Microsoft Windows" Browser in the Browser (BitB)

Download Copy
Title: "Microsoft Windows" Browser in the Browser (BitB)
Author: TW-D

1. Hide "PowerShell" window. 2. Change "monitor-timeout (AC and DC)" at NEVER with "powercfg" utility. 3. Change "standby-timeout (AC and DC)" at NEVER with "powercfg" utility. 4. Copies and hides the phishing folder in the current user's directory. 5. Full screen opening of the phishing HTML page using "Microsoft Edge" in kiosk mode. 6. The username/password will be sent by HTTP POST to the URL specified in the "DROP_URL" constant.

Phishing is a popular technique for gaining access to a target. Generally, phishing is a digitally delivered social engineering method. Phishing techniques may use a wide net, or specifically target one role or individual — known as spearphishing. Many phishing campaigns involve tricking a target into divulging confidential information, such as by mimicking a known-trusted source — be it a website or person. See all phishing payloads.

This payload is for the Bash Bunny. Simultaneously mimic multiple trusted devices to trick targets into divulging sensitive information without triggering defenses. The Bash Bunny is truly the world's most advanced USB attack platform.

Submit your own payload, or browse more featured Bash Bunny Payloads.

 

 

Related Payloads

Exfiltrate NTLM Hash
Exfiltrate NTLM Hash
A payload used to exfiltrate the NTLM hash on a Windows machine.
Read More
Shark Net Sniff
Shark Net Sniff
uses tcpdump to capture network traffic for 1 minute and saves a pcap into loot storage folder
Read More
SSH proxy pivot
SSH proxy pivot
Creates Dynamic port forwarding available on Squirrel to allow for pivoting inside network from remote server.
Read More