Bash Bunny
Search…
Bash Bunny by Hak5
Getting Started
Switch Positions
Mass Storage Structure
LED Status Indications
Installing Additional Tools
Installing Additional Languages
Considerations for Mark II
Beginner Guides
Writing Keystroke Injection Payloads for the Bash Bunny
Network Hijacking Attacks with the Bash Bunny
Top 5 Bash Bunny Exfiltration Payloads to "steal files"
Getting Root on a Bash Bunny from the Serial Console
Remote Triggers for the Bash Bunny Mark II
Geofencing for the Bash Bunny Mark II
Internet Connectivity
Getting the Bash Bunny Online
Sharing an Internet connection from Windows
Sharing an Internet connection from Linux
Sharing an Internet connection from MacOS
Software Updates
Updating the Bash Bunny Firmware
Writing Payloads
Payload Development Basics
DuckyScript™ on the Bash Bunny
Extensions
ATTACKMODE
LED
QUACK
VID, PID, MAN, PROD, SN
Working with the File System
CPU Control
Contributing Best Practices
Submitting Payloads
WAIT_FOR_PRESENT
Troubleshooting
Factory Reset
Password Reset
Video Guides
Bash Bunny Primer
Bash Bunny Phishing Attack with Hamsters
Password Grabber Bash Bunny Payload
Operating System Detection with the Bash Bunny
Bash Bunny Extensions
Reverse Shells on Linux with Bash Bunny
Bash Bunny Payload - Sudo Bashdoor on Linux
Bash Bunny Payload - 1990's Prank
Bash Bunny Dev - Behind the Scenes
Concealed Exfiltration - Pocket Network Attacks with the Bash Bunny
How to write Bash Bunny payloads and contribute on GitHub
Powered By GitBook
Extensions
Extensions which augment DuckyScript with new commands and functions. For each payload.txt run, extensions are sourced automatically. Calling the function names of any extension will produce the desired result. Extensions reside in the payload library on the USB mass storage partition from /payloads/library/extensions.

This table is provides a non-exhaustive list of basic usage for some extensions. Additional extension documentation can be found from the comments within each individual extension script file in /payload/library/extensions.
COMMAND
Description
Example
RUN
Keystroke injection shortcut for mutli-OS command execution.
RUN WIN notepad.exe
RUN OSX terminal
RUN UNITY xterm
GET
Exports system variables
GET TARGET_IP # exports $TARGET_IP
GET TARGET_HOSTNAME # exports $TARGET_HOSTNAME
GET HOST_IP # exports $HOST_IP
GET SWITCH_POSITION # exports $SWITCH_POSITION
REQUIRETOOL
Exits payload with LED FAIL state if the specified tool is not found in /tools
REQUIRETOOL impacket
DUCKY_LANG
Accepts two letter country code to set the HID injection language for subsequent ducky script / QUACK commands
DUCKY_LANG us
Extensions replaced bunny_helpers.sh from Bash Bunny firmware version 1.1 onwards.
Extensions come pre-installed on the Bash Bunny Mark II
Writing Payloads - Previous
DuckyScript™ on the Bash Bunny
Next - Writing Payloads
ATTACKMODE
Last modified 8mo ago
Copy link