Air-Gapped Networks: Exfiltration without Privilege Escalation for Military and Police Units

Several security tools have been described in recent times to assist teams; however, the effectiveness and success remain limited specific devices. Phishing is a type of cyberattack that uses fraudulent emails websites obtain personal information from unsuspecting users, such as passwords credit card numbers. Hackers can gain access your through variety methods, most common which are king, phishing, spear social engineering, dictionary attacks. Each these techniques unique, but they all same goal: information. Nevertheless, there potential exploit this problem terms security. In paper, we used Bash Bunny (BB), new tool designed military, law enforcement, penetration tester teams with their work conduct exfiltration without privilege escalation T1200, T1052, T1052.001 air-gapped networks effectiveness/success 99.706%.