M507 / Bfsense

Malicious patch for Pfsense router to perform Red Team activities.

Bfsense

Bfsense is a malicious patch for pfsense.

Disclaimer: This patch is used for educational purposes ONLY! The patch is malicious, don't use it on a public-facing router. I DO NOT hold any responsibility for any misuse or damage of the information provided in my blog posts, discussions, activities, repositories, or exercises.

Overview

• Hijack credentials + integrated with CellTower
• Beaconing functionality + integrated with pwnboard
• Backdoored
• Fake all updates
• End-game nuke :)

Last test on

• Pfsense 2.4.5-RELEASE on FreeBSD 11.3-STABLE