b114f4327c
Added a new module for SOCKSv5 proxying
...
When executed, this module connects back to a designated AlmondRocks server under SSL. The AlmondRocks server acts as a SOCKSv5 proxy, and multiplexes all SOCKS communications over the single SSL connection to/through the target, enabling any SOCKSv5 client (e.g. curl, proxychains) to extend past NAT devices into the target network.
This is based on the following work:
- https://github.com/klustic/AlmondRocks
2017-04-04 17:19:56 -06:00
b5697fc66b
Fixed Hijacker scanner. Fixed template Hijackers
2016-10-03 21:33:05 -04:00
ee2bf516d3
Removed standalone hijacker creation
2016-10-03 13:03:31 -04:00
7424e42f94
Updated hijackers
2016-10-03 12:20:03 -04:00
d96fb4f905
Updated memory importer and webserver
2016-09-28 21:36:35 -04:00
2b7bb42652
Added in memory imports to agent. Still testing
2016-09-27 21:09:02 -04:00
a145190e47
Merge branch 'dev' of https://github.com/adaptivethreat/EmPyre into dev
2016-09-21 23:32:22 -04:00
50166c4374
Added Jar stager
2016-09-13 01:18:00 -04:00
5c4e62d31f
Updated the install script and dylib, pkg, application stagers
2016-08-27 22:09:33 -04:00
1dc3d6f13e
Added more customization for Installer Pkg's
2016-08-21 13:08:08 -04:00
4e767c528e
Add pkg installer stager.
...
Added pkg installer stager. Not very customizable at the moment.
Added AppName option to application stager.
Updated install bash script to include depencies for creating pkg files (mkbom, xar archiver).
2016-08-17 11:24:03 -04:00
9ba2a6ee2d
Update stager.py
2016-08-15 10:21:36 -04:00
98ca3361ec
add logic for failed get_sysinfo()
2016-08-15 10:15:24 -04:00
56c77d210b
replaced SafeChecks options w/ LittleSnitch
2016-08-14 17:45:26 -04:00
b494b09809
Added application launcher
2016-08-14 17:19:20 -04:00
53cb7cc212
Update agent.py
2016-07-04 14:12:18 -04:00
dac72cd50d
module output
2016-06-26 00:32:10 -04:00
dbd4a51db7
module outpu
2016-06-26 00:21:20 -04:00
93449bba45
module outpu
2016-06-26 00:13:49 -04:00
aa56d39622
upload/download
2016-06-25 11:45:59 -04:00
af98a8b0d3
Merge pull request #18 from adaptivethreat/shell-run-command-fix
...
Shell run_command fix
2016-06-01 15:00:26 -04:00
3c18cc9d33
>,<,>>,<< support
2016-05-29 20:23:16 -04:00
e7e32360d9
Fixed IP checking for agent
2016-05-28 09:23:23 -04:00
26351a045c
Added dylib's without re-export load command
...
Updated stagers
Updated CreateHijacker
Added x64 Shellcode Injection module
2016-05-21 10:25:48 -04:00
31d4ef9007
Fix shell pipe issues
2016-05-18 13:46:40 -04:00
574c7de65d
Fixes
2016-05-18 10:36:06 -04:00
db1dd4cfff
Linux priv checker
2016-05-18 09:43:29 -04:00
504aad7f8e
Add webserver / linux priv esc
2016-05-18 09:01:28 -04:00
d0aeb9fa40
wMerge branch 'master' of https://github.com/adaptivethreat/EmPyre into linux-priv-checker
2016-05-17 15:41:37 -04:00
a3c2acd694
Bug fix for Python 2.6, thanks guys :)
2016-05-17 00:32:51 -04:00
0393087c7c
Merge pull request #7 from jbertman/master
...
Convert jitters to int, cross compatibility for obtaining current user. Code is tested and looks solid. Thanks alex.
2016-05-15 14:15:02 -04:00
23f38b459d
Added source for macho and dylib templates
2016-05-14 19:25:36 -04:00
09fd2823bc
Convert jitters to int, cross compatability for current user
2016-05-13 10:50:56 -04:00
739c3380f0
Final release prep.
2016-05-12 16:53:24 -04:00
cbfbceb503
Merge branch 'master' of https://github.com/adaptivethreat/EmPyre
2016-04-23 15:48:51 -04:00
bb01701b36
Updated machotemplate to remove debug strings
...
changed reexport_library path and recompiled dylib templates
changed CreateHijacker module to generate dylib at module runtime
changed launchdaemonexecutable module to generate macho at module runtime
updated RemoveDaemon module
updated module output in HijackScanner module
corrected default user-agent in setup_database.py
2016-04-23 15:41:05 -04:00
ad305b5fd9
Job Kill / Agent Exit / Job Template / Job Buffer on Checkin
2016-04-21 23:35:28 -04:00
bb58d94088
KThread Class and Task 5* Fixes
2016-04-13 07:05:17 -04:00
0b749ba2b9
Make agent DC exec Global()
2016-04-08 20:12:56 -04:00
88cc90bd33
Agent background addition
2016-04-05 21:44:07 -04:00
9c2e70ea27
Added Safe Browsing Profile
2016-03-30 09:04:36 -04:00
7941abe366
Add in tasking 102, on disk execution
2016-03-25 11:25:32 -04:00
d4fe0c96e6
Error buffer data recovered
2016-03-24 10:13:37 -04:00
8c1a7a7432
Complie Namespace Fix
2016-03-22 22:09:38 -04:00
95ccfbe655
PEP8 for data\agent\stager_hop.py
2016-03-22 14:50:20 -04:00
f29a6716bc
PEP8 for data\agent\stager.py
2016-03-22 14:46:45 -04:00
a76ab50331
Added CreateHijacker module to configure an empyre dylib
2016-03-18 18:39:20 -04:00
0453f9629a
Added dylib stager
2016-03-10 23:58:04 -05:00
679e4cdf93
Added macho binary stager. Added macholib dependancy to install script
2016-03-09 00:00:48 -05:00
6cc57ed7bd
Move of EmPyre codebase to Github.
2016-02-29 13:37:27 -05:00
Kevin