With the Bash Bunny Mark II, payload stages may be triggered using the WAIT_FOR_PRESENT and WAIT_FOR_NOT_PRESENT extensions.

Geofencing may be achieved by profiling the bluetooth wireless environment of the target. Multiple WAIT_FOR_PRESENT commands may be “stacked” one after another.

WAIT_FOR_PRESENT

  # Pauses payload execution until specified bluetooth identifier IS present# Usage: WAIT_FOR_PRESENT devicename
  

Example

  # Stage 1: Enumerate as mass storage with silent HID device
ATTACKMODE HID STORAGE
WAIT_FOR_PRESENT my-bluetooth-device-name

# Stage 2: Type Hello World into Notepad
WIN RUN notepad.exe
QUACK DELAY 1000
QUACK STRING Hello World
  

WAIT_FOR_NOT_PRESENT

  # Pauses payload execution until specified bluetooth identifier IS NOT present
# Usage: WAIT_FOR_NOTPRESENT devicename