How Sri Lankan trainers use the Bash Bunny Mark II for authorised HID and multi-vector USB labs — scope, detection pairing, and ALFA Network LK pricing.
Product photo: Hak5
Seven seconds is a lesson, not a joke
Someone always suggests “testing” a colleague’s unlocked laptop at lunch. That is how programmes lose trust. The Bash Bunny Mark II belongs in a scheduled USB lab with a disposable VM image, a written objective, and a detection control waiting on the other side.
ALFA Network LK price: LKR 89,500 (VAT inclusive).
What you are really demonstrating
Hak5 positions Mark II as a multi-vector USB platform: HID, Ethernet, storage, serial — alone or combined — with DuckyScript plus Bash on a fast Debian box, MicroSD loot space, and BLE geofencing/triggers. The teaching point is not “hacking is cool.” It is “Windows still trusts keyboards and NICs more than your poster says.”
Authorised scenario
Picture this: a bank SOC in Rajagiriya wants analysts to feel how quickly a composite USB device can open a path, then immediately harden device control policy. You run the Bunny against a lab PC they own, capture the timeline, and close with the Intune/GPO change that would have blocked it.
Kit pairing
- USB Rubber Ducky for pure keystroke injection modules
- Bash Bunny when the lesson needs Ethernet + HID in one plug
- Keep payloads on a labelled MicroSD; never the same stick you use for family photos
Tips
- Geofence payloads to the office SSID list in the SOW — or disable wireless features when RF is out of scope.
- Test on a VM snapshot you can roll back in one click.
- Film the LED state for the report; auditors like boring evidence.
- Retire community payloads you have not read line by line.
FAQ
Is it “just a Rubber Ducky”?
No. Ducky is focused keystroke injection. Bunny adds multi-vector USB roles and a full Linux userspace.
Can BLE triggers go in a student homework kit?
Only inside campus/lab RF rules you have approved in writing.
Will antivirus catch it?
Often HID typing sails past AV. That is the lesson — add device control.
How to order?
ALFA Network LK — see below.
Legal and ethical use
These tools belong in authorised assessments, lab practice, and training — not casual tinkering on networks that are not yours.
In Sri Lanka, unauthorised access to computer systems can engage the Computer Crimes Act No. 24 of 2007. This post is practical product guidance, not legal advice. If you are unsure whether a test is allowed, get written permission first and talk to counsel who knows local law.
Only use this gear on systems you own, or on systems where a named client has given you written authorisation that covers the methods you plan to run.
Ordering from ALFA Network LK
Hak5 Bash Bunny Mark II: LKR 89,500 (VAT inclusive).
Order on alfanetworklk.com or WhatsApp ALFA Network LK at +94 75 255 0704. Payment options: cash on delivery, KokoPay, or bank deposit. Before dispatch we ask for ID verification and a signed authorised-use declaration.
Questions: info@alfanetworklk.com.
Comments (0)
No public comments yet.