Not sure if you guys have seen this already, but you can try this out yourself on github.com/tholum/PiBunny with a Pi Zero, which brings it a lot closer to that $10 mark :)
Making one out of a Raspberry pi zero running a very light custom debian distro could be possible, you can use the GPIO to put a dip switch, use the microSD as os and storage for scripts and since you showed how to ssh into a pi0 using a single usb and i think you can use the same usb for emulating a mass storage device, keyboard, mouse or even a ethernet adapter. You can even integrate a wifi adapter by soldering a tiny wifi dongle to the usb solder pads on the bottom so that we can use it as a WLan turtle! The hardware is ok, we just need a bit of software but i'm pretty sure someone has already made these features work so we should just have to unify them into a simple dipswitch and ssh interface Who's with me on this?
no redlolz, the bash bunny has a built in 8gb ssd, as well as usb-ethernet and hid emulation. Not to mention the fact that the bash bunny uses bash, not the language duckys use. it is possible, just not the way you said.
Max Marchuk I'm betting the bash bunny is a Pi Zero connected in parallel via a USB hub to a teensy/digispark with the teensy hooked to the zero via it's serial lines. That way the zero controls the spark and could send it instructions directly. I might give that a bash, no pun intended, at the weekend.
Nice! Very excited about the Bash Bunny. Unfortunately it's a little pricey, so I won't be picking one up just yet. That's expected though because it seems to have A LOT of functionality. It also has an 8gb SSD inside, and it opens up a world of attack vectors. Very cool product by Hak5 once again. Looking forward to see someone open this thing up so we can see what it's guys look like ;D
Everything working now seytonic, thanks for the help. Just wanna ask you, how to acces other devices/computer on the network? (i can just spawn a shell in my TURTLE, not the computer it was connected to.. wich is kind of weird) , + the redirecting of traffic, do you must have it connected to a powerbank?, can i have it directly in the outlet by a android-charger?
I really want to get one of those (LAN Turtle, Bash Bunny or Rubber Ducky) but a) they're so expensive and b) there seems to be no way to split the billing. I tried DIY-ing my way out of this situation but even that didn't work :(
what would you guys recommend for an aspiring penetration tester who has incredibly limited knowledge. a USB rubber ducky or the new Bash bunny? also state reasons :)
yessir This doesn't replace the ducky, as the ducky only takes 0.5 seconds to start injecting keystrokes, where as the bashbunny is a full linux box so it takes 7-10 seconds to boot up.
Next on Seytonics: "$10 BashBunny"
that's gonna take a while lol
hahahaha
I'm working on it with a Pi zero, it's just a pain
Vincent Lee have you gotten anywhere im really want to make one myself
Not sure if you guys have seen this already, but you can try this out yourself on github.com/tholum/PiBunny with a Pi Zero, which brings it a lot closer to that $10 mark :)
Making one out of a Raspberry pi zero running a very light custom debian distro could be possible, you can use the GPIO to put a dip switch, use the microSD as os and storage for scripts and since you showed how to ssh into a pi0 using a single usb and i think you can use the same usb for emulating a mass storage device, keyboard, mouse or even a ethernet adapter. You can even integrate a wifi adapter by soldering a tiny wifi dongle to the usb solder pads on the bottom so that we can use it as a WLan turtle!
The hardware is ok, we just need a bit of software but i'm pretty sure someone has already made these features work so we should just have to unify them into a simple dipswitch and ssh interface
Who's with me on this?
Next video: How to make a $2 BashBunny
Could we build the bash bunny using arduino micro or raspberry pi zero
I don't see why you couldn't do something similar with a pi zero, however it isn't something I've looked at yet.
Brian Kelleher yes you can, lookup usb rubber ducky raspberry pi, modify the script to work with a switch on the gpio and boom, done
no redlolz, the bash bunny has a built in 8gb ssd, as well as usb-ethernet and hid emulation. Not to mention the fact that the bash bunny uses bash, not the language duckys use. it is possible, just not the way you said.
Hurp Durp i know i only mentioned one feature, but the others aren't that hard too
Since this thing costs $100 and the biggest difference seems to be that it has a 2Gb NIC and is probably a bit faster, get on it!
Just a correction: another downside from the USB Rubber Ducky is that this has slower keystroke injection. Less CPS
hey seytonic! can we build one with a pi zero? :D
inb4 next vid 8 $ bashbunny !!!
kuba Gaming I was just thinking the same thing.
Technically, you could get the pi zero to act as one. I've seen it act as a BadUSB and a LanTurtle. It would be a lot of scripting, but it's possible
Max Marchuk I'm betting the bash bunny is a Pi Zero connected in parallel via a USB hub to a teensy/digispark with the teensy hooked to the zero via it's serial lines. That way the zero controls the spark and could send it instructions directly. I might give that a bash, no pun intended, at the weekend.
nope, it's all custom hardware built specifically for convenient penetration testing
did anyone else notice that he liked his own comment on the hak5 video at the beginning?😂
Pls make a video about the electric hotel doors!
Nice! Very excited about the Bash Bunny. Unfortunately it's a little pricey, so I won't be picking one up just yet. That's expected though because it seems to have A LOT of functionality. It also has an 8gb SSD inside, and it opens up a world of attack vectors. Very cool product by Hak5 once again. Looking forward to see someone open this thing up so we can see what it's guys look like ;D
Seems very interesting, I would buy it but for $100 it has a lot of features I could take or leave.
since the bunny is a whole linux system, can't we just try to run poisontap on it??
You might need a change a few things, but I don't see why it wouldn't work.
Seytonic thats my point xD
Seytonic bunnytap is out
any chance we can see what's inside the bash bunny ??? just thinking out loud ;)
Everything working now seytonic, thanks for the help. Just wanna ask you, how to acces other devices/computer on the network? (i can just spawn a shell in my TURTLE, not the computer it was connected to.. wich is kind of weird) , + the redirecting of traffic, do you must have it connected to a powerbank?, can i have it directly in the outlet by a android-charger?
Next on Seytonics: "$1 Bash Bunny!"
Are you gonna do more videos on the bash bunny?
I really want to get one of those (LAN Turtle, Bash Bunny or Rubber Ducky) but a) they're so expensive and b) there seems to be no way to split the billing.
I tried DIY-ing my way out of this situation but even that didn't work :(
can you crack it open and show us what is running under the hood?
is there support, example code and tutorials for the bash bunny scripting language?
Seems similar to using a Raspberry Pi Zero in Gadget Mode.
Make a arduino bashbunny pls!!!
That is impossible
Consider getting a pop filter
he already got it !!!!??
1:42 the all family together.
Can you make more videos on hak5 stuff?
Brb Buying the new raspberry pi and saving $90
when do they ship? I ordered it a hour after it launched :P
nvm they just shipped it :)
what would you guys recommend for an aspiring penetration tester who has incredibly limited knowledge. a USB rubber ducky or the new Bash bunny? also state reasons :)
Do a DIY BashBunny please haha!
Yey a bashbunny
wow 1 2 switch is on this thing
I love your vids so much
more videos
An expensive raspberry zero.
Or an arduino micro
Do Elite Malduino comes with SDcard?
As of now, it doesn't.
How did you get one this fast??
Magic.
Can it run rubber ducky scripts?
yessir
This doesn't replace the ducky, as the ducky only takes 0.5 seconds to start injecting keystrokes, where as the bashbunny is a full linux box so it takes 7-10 seconds to boot up.
Wow!
please reply
PogChamp
the tactile feedback of the switch is crap.
100$...
first