Skip to content

Comments

Add NullSec Payloads - WiFi Harvester & System Recon#705

Merged
hak5peaks merged 1 commit intohak5:masterfrom
bad-antics:add-nullsec-payloads
Feb 2, 2026
Merged

Add NullSec Payloads - WiFi Harvester & System Recon#705
hak5peaks merged 1 commit intohak5:masterfrom
bad-antics:add-nullsec-payloads

Conversation

@bad-antics
Copy link
Contributor

🐰 NullSec Payload Collection

Two new payloads for the Bash Bunny.

📁 Payloads Included

Payload Category Description Time
NullSec-WiFi-Harvester credentials Extract all saved WiFi passwords ~8-10s
NullSec-System-Recon recon Comprehensive system reconnaissance ~15-20s

✨ Features

  • HID + STORAGE attack modes
  • LED status indicators (SETUP → ATTACK → FINISH)
  • Loot to USB - saved with hostname prefix
  • Silent execution - hidden PowerShell window
  • Windows 10/11 targeted
  • Complete documentation

📋 Payload Details

WiFi Harvester

  • Uses netsh to enumerate all saved profiles
  • Extracts passwords in cleartext
  • Saves to loot: <HOSTNAME>_wifi.txt

System Recon

Collects:

  • OS version and system specs
  • Current user and domain info
  • Local user accounts
  • Network configuration (IP, gateway, DNS, MAC)
  • Windows Defender status

Saves to loot: <HOSTNAME>_recon.txt

🔗 Author

Thanks for maintaining this awesome project! 🐰

Added 2 Bash Bunny payloads:

1. NullSec-WiFi-Harvester (credentials/)
   - Extracts all saved WiFi passwords
   - Saves to loot with hostname prefix
   - Uses netsh for profile enumeration
   - ~8-10 second execution

2. NullSec-System-Recon (recon/)
   - Comprehensive system reconnaissance
   - OS, users, network, AV status
   - Saves detailed report to loot
   - ~15-20 second execution

Both payloads:
- Use HID + STORAGE attack modes
- Include proper LED status indicators
- Have complete readme documentation
- Target Windows 10/11
@hak5peaks hak5peaks merged commit d39b712 into hak5:master Feb 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants