{"action":"created","issue":{"url":"https://api.github.com/repos/hak5/bashbunny-payloads/issues/213","repository_url":"https://api.github.com/repos/hak5/bashbunny-payloads","labels_url":"https://api.github.com/repos/hak5/bashbunny-payloads/issues/213/labels{/name}","comments_url":"https://api.github.com/repos/hak5/bashbunny-payloads/issues/213/comments","events_url":"https://api.github.com/repos/hak5/bashbunny-payloads/issues/213/events","html_url":"https://github.com/hak5/bashbunny-payloads/pull/213","id":226613088,"number":213,"title":"sFTP Directory Grabber","user":{"login":"jdugat","id":11046142,"avatar_url":"https://avatars1.githubusercontent.com/u/11046142?v=3","gravatar_id":"","url":"https://api.github.com/users/jdugat","html_url":"https://github.com/jdugat","followers_url":"https://api.github.com/users/jdugat/followers","following_url":"https://api.github.com/users/jdugat/following{/other_user}","gists_url":"https://api.github.com/users/jdugat/gists{/gist_id}","starred_url":"https://api.github.com/users/jdugat/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jdugat/subscriptions","organizations_url":"https://api.github.com/users/jdugat/orgs","repos_url":"https://api.github.com/users/jdugat/repos","events_url":"https://api.github.com/users/jdugat/events{/privacy}","received_events_url":"https://api.github.com/users/jdugat/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-05-05T15:43:02Z","updated_at":"2017-05-10T01:42:22Z","closed_at":"2017-05-10T01:42:22Z","pull_request":{"url":"https://api.github.com/repos/hak5/bashbunny-payloads/pulls/213","html_url":"https://github.com/hak5/bashbunny-payloads/pull/213","diff_url":"https://github.com/hak5/bashbunny-payloads/pull/213.diff","patch_url":"https://github.com/hak5/bashbunny-payloads/pull/213.patch"},"body":"ExecutableInstaller with sftp recursive directory grab for Bash Bunnys\r\nBy default the staged payload copies the payload psFTP.exe from the root of the Bash Bunnyand executes it via e.cmd.\r\nThe payload copies to %TEMP%, change this to wherever you like by editing e.cmd.\r\nYou may also copy a payload inside a directory, see comments in e.cmd.\r\nMake changes to e.cmd for your sFTP user@domain.com, sFTP password, sftp directory for loot and target machine directory \r\nfor loot to be taken from. Variables are as follows:\r\n\r\nsftphost=username@hostname.domain.com\r\nsftppass=password\r\nlootfrom=c:\\users\\username\\documents\r\nlooto=/loot\r\n\r\nIMPORTANT: Please copy psFTP.exe from the payload directory to the root of the bash bunny before attempting to use this payload."},"comment":{"url":"https://api.github.com/repos/hak5/bashbunny-payloads/issues/comments/300349803","html_url":"https://github.com/hak5/bashbunny-payloads/pull/213#issuecomment-300349803","issue_url":"https://api.github.com/repos/hak5/bashbunny-payloads/issues/213","id":300349803,"user":{"login":"sebkinne","id":510292,"avatar_url":"https://avatars2.githubusercontent.com/u/510292?v=3","gravatar_id":"","url":"https://api.github.com/users/sebkinne","html_url":"https://github.com/sebkinne","followers_url":"https://api.github.com/users/sebkinne/followers","following_url":"https://api.github.com/users/sebkinne/following{/other_user}","gists_url":"https://api.github.com/users/sebkinne/gists{/gist_id}","starred_url":"https://api.github.com/users/sebkinne/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sebkinne/subscriptions","organizations_url":"https://api.github.com/users/sebkinne/orgs","repos_url":"https://api.github.com/users/sebkinne/repos","events_url":"https://api.github.com/users/sebkinne/events{/privacy}","received_events_url":"https://api.github.com/users/sebkinne/received_events","type":"User","site_admin":false},"created_at":"2017-05-10T01:42:22Z","updated_at":"2017-05-10T01:42:22Z","body":"Hi @jdugat,\r\n\r\nYour payload ships a binary file with it. Unfortunately this is against our policy. Further details about this will be on our wiki soon!\r\n\r\nWhat you can do is allow the user to download the binary by giving instructions in the readme file. You'll also have to clearly state that this is a binary and that hak5 is not responsible for the execution of 3rd party binaries."}}
{"actor":{"display_login":"sebkinne"}}