b114f4327c
Added a new module for SOCKSv5 proxying
...
When executed, this module connects back to a designated AlmondRocks server under SSL. The AlmondRocks server acts as a SOCKSv5 proxy, and multiplexes all SOCKS communications over the single SSL connection to/through the target, enabling any SOCKSv5 client (e.g. curl, proxychains) to extend past NAT devices into the target network.
This is based on the following work:
- https://github.com/klustic/AlmondRocks
2017-04-04 17:19:56 -06:00
b5697fc66b
Fixed Hijacker scanner. Fixed template Hijackers
2016-10-03 21:33:05 -04:00
7424e42f94
Updated hijackers
2016-10-03 12:20:03 -04:00
21e9959665
Merge branch 'dev' of https://github.com/AdaptiveThreat/EmPyre into dev
2016-08-13 19:45:14 -04:00
9c7bbe65c7
dscl search modules
2016-08-13 19:43:57 -04:00
3b473a867d
Revert "Updated SafeChecks for little snitch and sandboxes"
...
This reverts commit 012c3a4218
2016-08-12 18:49:02 -04:00
4ced4a3311
Add Modules
2016-08-10 22:14:17 -04:00
012c3a4218
Updated SafeChecks for little snitch and sandboxes
2016-08-08 11:12:38 -04:00
2436b00a8d
Crontab fix
2016-08-06 20:27:26 -04:00
62429da488
Merge branch 'master' into dev
...
DC/OS, Mesos DNS, Mesos Master, Marathon, Chronos modules from BSidesLV 2016 @TweekFawkes talk.
2016-08-05 17:24:04 -04:00
c58c3c02be
DC/OS modules from BSidesLV 2016 @TweekFawkes talk
2016-08-05 14:02:20 -04:00
b4091e23f3
add monitoring
2016-07-24 10:42:27 -04:00
5cc2615ef9
Merge pull request #27 from adaptivethreat/dev-compress
...
Dev compress
2016-06-28 13:07:00 -04:00
324ff6db39
Update keychaindump_chainbreaker.py
2016-06-28 13:01:33 -04:00
eb65c6583d
Update keychaindump_chainbreaker.py
2016-06-28 09:28:53 -04:00
e1d2ec1d87
Update keychaindump_chainbreaker.py
2016-06-28 09:28:28 -04:00
ee8bcad874
Update keychaindump_chainbreaker.py
2016-06-26 23:18:28 -04:00
cd97588c52
Update keychaindump_chainbreaker.py
2016-06-26 23:18:16 -04:00
20afb3cf87
chainbreaker
2016-06-26 23:14:27 -04:00
93449bba45
module outpu
2016-06-26 00:13:49 -04:00
4446d3c96c
Update screensaver_alleyoop.py
2016-06-16 22:00:09 -04:00
761d16bd99
Update sniffer.py
2016-06-16 21:59:49 -04:00
0449f64c31
Update sniffer.py
2016-06-16 21:56:19 -04:00
12509c09f2
Fix Sniffer
2016-06-16 21:45:00 -04:00
9c94191fe2
Removed opsec safe
2016-05-31 22:25:16 -04:00
95d3671f05
Added Kerberos_Inject
2016-05-29 23:32:06 -04:00
f6976798d4
add module
2016-05-23 19:52:10 -04:00
e0d14c7b92
add module
2016-05-23 19:48:47 -04:00
a099c8e399
Fixed newline character escape in shellcode inject module. Added module output.
2016-05-21 12:03:00 -04:00
26351a045c
Added dylib's without re-export load command
...
Updated stagers
Updated CreateHijacker
Added x64 Shellcode Injection module
2016-05-21 10:25:48 -04:00
87b215b850
Fixes
2016-05-18 11:06:22 -04:00
574c7de65d
Fixes
2016-05-18 10:36:06 -04:00
db1dd4cfff
Linux priv checker
2016-05-18 09:43:29 -04:00
504aad7f8e
Add webserver / linux priv esc
2016-05-18 09:01:28 -04:00
3339db65cf
Add kerberosdump.py
2016-05-17 09:04:47 -04:00
1a2eaa840f
Update sniffer.py
2016-05-16 12:34:51 -04:00
49752633ee
linux in memory PCAP sniffer
2016-05-16 11:07:10 -04:00
d80322ecca
Add get_gpppasswords.py
2016-05-12 18:14:30 -04:00
fde0e38efd
Merge branch 'master' of https://github.com/AdaptiveThreat/EmPyre
2016-05-12 10:32:13 -04:00
e722af1e22
Removed random uuid generation for executable. Set option to required.
2016-05-12 08:13:04 -04:00
cd15fa12d0
license updates
2016-05-12 00:56:59 -04:00
ba18379804
Renamed GPPPasswords
2016-05-11 18:46:02 -04:00
e2c631729a
Changed Thunderstruck volume to 100%
2016-05-11 01:43:56 -04:00
bc879be070
Added collection/linux/pillage_user
2016-05-09 16:14:50 -04:00
114c883282
Added collection/linux/hashdump
2016-05-09 16:03:04 -04:00
286d15b450
Module reorganization
2016-05-06 18:22:31 -04:00
cbfbceb503
Merge branch 'master' of https://github.com/adaptivethreat/EmPyre
2016-04-23 15:48:51 -04:00
bb01701b36
Updated machotemplate to remove debug strings
...
changed reexport_library path and recompiled dylib templates
changed CreateHijacker module to generate dylib at module runtime
changed launchdaemonexecutable module to generate macho at module runtime
updated RemoveDaemon module
updated module output in HijackScanner module
corrected default user-agent in setup_database.py
2016-04-23 15:41:05 -04:00
9c1ce0299d
Merge pull request #4 from adaptivethreat/Dev-killthreads
...
Threads and more
2016-04-22 09:03:24 -04:00
b6938c2dea
Job Kill / Agent Exit / Job Template / Job Buffer on Checkin
2016-04-21 23:36:51 -04:00
Kevin