
Useful links:
Bash Bunny Mark II is the evolution of Hak5's multi-vector USB attack platform. Quad-core ARM CPU and desktop-class SSD for nearly instant boot and payload execution. Simultaneously emulates trusted devices (keyboard, gigabit Ethernet, storage and serial) for combined injection, exfiltration and post-exploitation attacks in authorised audits. Three-position physical switch to swap between payloads without reflashing. Internal storage expandable via MicroSD for payloads, binaries and bulk exfiltration. Built-in Bluetooth for wireless geofencing and remote payload activation. RGB LED indicates execution status in real time. Root shell with dedicated serial access for tools like nmap, Responder, Impacket and metasploit-framework. Compatible with DuckyScript and the Hak5 payload repository.
Main features:
- Embedded Linux with root shell
- Quad-core ARM CPU with desktop-class SSD
- Simultaneous multi-vector emulation (HID, gigabit Ethernet, serial, storage)
- 3-position physical switch (2 payloads + arming mode)
- Expandable storage via MicroSD
- Built-in Bluetooth (geofencing and remote payload activation)
- Real-time RGB status LED
- Dedicated serial access for debugging
- Compatible with DuckyScript and Bash/Python scripts
- Compatible with nmap, Responder, Impacket and metasploit-framework
- PayloadStudio compatible

