🏆 by I am Jakoby May 19, 2022
Credentials USB Rubber Ducky
A script used to prompt the target to enter their creds to later be exfiltrated with dropbox. A pop up box will let the target know "Unusual sign-in. Please ...
🏆 by 0iphor13 May 12, 2022
Bash Bunny Remote Access
ReverseBunnySSL gets you remote access to your target in seconds. Unlike ReverseBunny, ReverseBunnySSL offers encrypted traffic via OpenSSL.
🏆 by TW-D May 12, 2022
Bash Bunny Phishing
1. Copies the "sudo" command spoofing program to the user's home directory.
2. Defines a new persistent "sudo" alias with the file "~/.bash_aliases".
3. When...
🏆 by I am Jakoby May 10, 2022
OMG Recon
A script used to do an advanced level of Recon on the targets computer. This program enumerates a target PC to include Operating System, RAM Capacity, Public...
🏆 by I am Jakoby May 10, 2022
Bash Bunny Recon
A script used to do an advanced level of Recon on the targets computer. This program enumerates a target PC to include Operating System, RAM Capacity, Public...
🏆 by drapl0n May 02, 2022
Bash Bunny Exfiltration
Demonstration of BLE_EXFIL extension.
🏆 by the-jcksn April 29, 2022
Bash Bunny Prank
Adds a physical copy of 'The Best of Rick Astley' CD to the target's Amazon shopping basket/cart. Requires the target to be logged onto amazon with 'remember...
🏆 by Cribbit April 20, 2022
Bash Bunny Exfiltration
Create a backup of the key manager which stores log-on credentials for servers, websites and programs.
Config: set the password for the backup by setting th...
🏆 by TW-D April 20, 2022
Remote Access USB Rubber Ducky
Adds a user account (RD_User:RD_P@ssW0rD).
Adds this local user to local administrator group.
Enables "Windows Remote Management" with default settings.
Adds...
🏆 by the-jcksn April 17, 2022
Prank USB Rubber Ducky
Creates a custom Microsoft Word Autocorrect rule, default sets rule to change "the" to "teh". Can be changed to any words you wish.
🏆 by 0iphor13 April 08, 2022
Execution OMG
Use your O.MG Cable / Plug to bypass UAC using one of the Fodhelper.exe methods. This POC will get you an elevated powershell instance and won't trigger AV a...
🏆 by I am Jakoby April 08, 2022
OMG Prank
A script I put together to torment Call Center Scammers but can be used on your friends as well.. or Foes.
🏆 by drapl0n April 08, 2022
Bash Bunny Execution
screenGrab payload captures snapshots of target's screen periodically and store them into bunny.
🏆 by TW-D March 29, 2022
OMG Remote Access
1. Adds a user account (OMG_User:OMG_P@ssW0rD).
2. Adds this local user to local administrator group.
3. Shares "C:" directory (OMG_SHARE).
4. Adds a rule to...
🏆 by 0iphor13 March 23, 2022
General OMG
A small message box, telling the user that he violated the security policy. The hostname of the user will be send to a webhook to report the incident. Fill i...
🏆 by Cribbit March 16, 2022
Bash Bunny General
Downloads a list of Hak5 vids from YouTube (about 15 in the rss feed).
Then pick one at random, then opens it in the browser.
🏆 by Maker March 13, 2022
Credentials USB Rubber Ducky
A variant of Win_Pass_Grabber by makozort but not reliant on Internet potentially ignoring any server-side-issues with Downloading/Uploading Files and Logs.
🏆 by drapl0n March 07, 2022
Bash Bunny Credentials
Keylogger which sends each and every keystroke of target remotely/locally.
Features:
- Live keystroke capturing.
- Detailed key logs.
...
Get Rewarded
Contribute
Collaborate
Caution
Disclaimer
Stats
Leaderboard