7 Minute Security

7MS #254: Bash Bunny

Apr 20, 2017 · 10 min · 14.7 MB
0:00-10:14

Streams straight from the publisher. podnod never proxies or re-hosts episode audio.

I've been working with the Bash Bunny for the past few weeks in preparation for a presentation/demo I'm doing in a few weeks. Today I want to talk about what the Bunny is, the cool things it can do, and some of my favorite payloads.

Also, I started thinking about what conversation topics spawn from a demo of the Bunny. Specifically, I want to know how people would defend against the Bunny using AD policies, peripheral controls, etc. Check out the Hak5 thread I started about this, as it has got some great ideas.