Bash Bunny

Descrizione

The Hak5 Bash Bunny Mark II is a programmable USB device for authorised security engagements, research and education. It can emulate combinations of trusted USB device types, including keyboards, serial devices, flash storage and Ethernet, allowing approved teams to assess endpoint controls and automate test workflows. RedKit Labs is an authorised Hak5 reseller.

Key features

• Supports multi-vector USB payloads through a three-position mode switch.
• Can emulate keyboards, serial devices, flash storage and Ethernet devices.
• Payloads are written as text files using Ducky Script.
• RGB LED provides payload status feedback.
• Bluetooth Low Energy supports remote triggers and geofencing features.
• MicroSD XC support enables additional storage and mass-exfiltration testing in authorised environments.
• Dedicated serial interface provides access to an unlocked root shell.
• First-generation Bash Bunny payloads are compatible with Mark II.

Technical details

• Quad-core ARM A7 processor, up to 1.3 GHz.
• 8 GB NAND SSD.
• MicroSD XC expansion up to 2 TB.
• Three-position payload switch.
• Bluetooth Low Energy.
• Seven-second boot time.

Compatibility and setup

Payloads are stored on the internal storage and configured as text files. In arming mode, the device presents as a flash drive for editing settings and loading payloads. A MicroSD card inserted during boot in arming mode is passed through to the host. Hak5 documents use with Linux penetration-testing tools including Nmap, Responder, Impacket and Metasploit. Use only on systems and networks where written authorisation has been provided.

Buying in the UK and EU

RedKit Labs offers the Bash Bunny Mark II and the HotPlug Attack Combo Kit for UK and EU buyers, with prices shown in GBP, EUR or USD and VAT handled at checkout. Review applicable laws and organisational policies before use, particularly those covering keystroke injection, data access and Bluetooth radio operation.