🐇 Hacking a Windows 10 Computer with the Bash Bunny or Rubber Ducky 🐤

This guide will show you the simplest way to get a remote shell connection on a Windows 10 target just by plugging in the Bash Bunny. This connection will give you command line control over the computer from a remote location, which I’d constitute as a “hacking” a Windows computer.

Bypass the paywall with this link.

This works equally as well, and probably better with a Rubber ducky (because it works faster) but I don’t own a Rubber Ducky, the Bash Bunny is just what I had on hand. Though most of the guide should work the same if you’re using a Rubber Ducky since they both simulate a keyboard.

Setup

What you’ll need:

1. Bash Bunny or Rubber Ducky
2. Remote Server (VPS)
3. L33T haxing skills

Number 3 is a lie. We’ll be using Winpayloads to generate Powershell payloads and control our shell, all from one program. It’s a script kiddies dream! It takes just two commands to start running Winpayloads once you have a Virtual Private Server set up.

nccgroup/Winpayloads

You could use any computer you own, but using a VPS service simplifies things. I recommend…