1043 Commits

Author SHA1 Message Date
mr64bit 6a70e59d6f Update Invoke-Obfuscation to 1.8 (6a6b0fc)
Credit to @phra, closes #1292
2019-02-15 09:28:37 -05:00
James 1dd70a9eca Merge pull request #1258 from quickbreach/dev
Initial commit of powershell/collection/toasted
2019-02-07 12:52:05 -05:00
mr64bit 029f51ce1f Fix bypass changes 2019-02-06 16:16:46 -05:00
phra 2e277b13ee feat: add rastamouse AMSI bypass, fixes #1290
(cherry picked from commit b19b7e6244)
2019-01-23 10:26:12 -05:00
phra 6b86fbd006 feat: make bypasses configurable, fixes #1288
(cherry picked from commit 66d10e20fd)
2019-01-23 10:21:23 -05:00
mr64bit 2b42db61e8 Add more explicit error for starting redirector on non-elevated agent 2019-01-20 14:59:36 -05:00
Rasta Mouse 699909b64e Update redirector.py
(cherry picked from commit 041316cfd5)
2019-01-20 14:55:40 -05:00
mr64bit 60f04b995a Fix client_secret params for Onedrive listener 2018-12-17 18:43:35 -05:00
mr64bit a36e4a18f8 Add client secret parameter to Onedrive listener 2018-12-01 17:41:04 -05:00
mr64bit 566008e178 Move module to correct directory, conform to module naming scheme 2018-12-01 13:34:37 -05:00
Dhiraj Mishra b8c0f5b1a8 HostRecon.py 2018-12-01 13:34:37 -05:00
Quickbreach a22951ad29 Added powershell/collection/toasted module 2018-10-23 19:03:06 -04:00
wh1tenoise 12d08effc6 Allow multi word arguments
(Closes #1237)
2018-10-12 13:42:18 -04:00
mr64bit dbb9f5ec27 Fix random variable names making stager code too long for PSInject 2018-06-09 19:24:23 -04:00
Chris Ross 60b2f85976 Merge pull request #1133 from klustic/dev
Modifications to agents.py, http.py. Updates to socks library for Python agents
2018-06-08 20:39:14 -04:00
Chris Ross 4d67258465 Merge pull request #1139 from ngkogkos/patch-1
Fix minor typo
2018-06-07 14:41:48 -04:00
xorrior 453f371eec Merge branch 'dev' of https://github.com/tjflaagan/Empire into tjflaagan-dev 2018-06-06 19:47:34 -04:00
Chris Ross 2ca534c6d0 Revert "Fixed cookie name empty on agents and added function get_listener_cookies on helper" 2018-06-06 19:38:06 -04:00
Chris Ross 834fc9e487 Merge pull request #1135 from matterpreter/master
Added Get-AppLockerConfig
2018-06-06 17:08:26 -04:00
Chris Ross 23a3fba5b2 Merge pull request #1128 from leesoh/remove-http-defaults
Remove listener default value for Port
2018-06-05 11:55:58 -04:00
Chris Ross 5ca2947ff3 Merge pull request #1129 from leesoh/invoke-phant0m
Initial commit of Invoke-Phant0m
2018-05-28 11:01:58 -04:00
Chris Ross 9cdbf156ec Merge pull request #1085 from infosecn1nja/dev
Fixed cookie name empty on agents and added function get_listener_cookies on helper
2018-05-28 10:48:29 -04:00
matterpreter 5f62dde76a Change Write-Host to Write-Output 2018-05-24 09:35:17 -07:00
Nikos Gk 7f1169a5e7 Fix minor typo 2018-05-19 14:55:40 +01:00
Tyler Flaagan 5ecad23fab Added listener to agent list view 2018-05-17 05:42:57 -07:00
chris 21ea9dbf15 Agents display improvements 2018-05-16 17:47:36 -04:00
matterpreter 605239e71b Moved PS code into main module instead of calling it in 2018-05-16 17:44:08 -04:00
Kevin 4868a924be Fixed exceptions and suppressed extraneous output in agents.py and http.py
When running background modules, when the agent reported in, a database lookup was performed for "task=0" for that agent, which did not exist in the database. This was causing an exception that was written to the terminal, so that every 5 seconds (or, beacon interval) the terminal I/O was being interleaved with an error message. The database lookup was part of unused code, so that block has been removed.

Additionally, the agents checking in also report the following:
```
[*] Agent SIOB3GNU returned results.
[*] Valid results returned by 172.17.0.1
```

Those messages do not provide useful information and again, cause interleaved I/O after each beacon. The messages have been suppressed by setting "print" to False for the dispatch events
2018-05-16 13:44:07 -06:00
Kevin 09a8c119ff Updated SOCKS proxy for Python agent
- Matches new version of AlmondRocks (v1.0.0)
- Breaks compatibility with previous versions of AlmondRocks
2018-05-16 13:39:33 -06:00
chris dacb913440 Fix macho generation logic 2018-05-16 14:48:57 -04:00
matterpreter 7c88ea0ac1 Add Get-ApplockerConfig
Added a host situational awareness script to check the AppLocker policy of a specified binary or all binaries in a folder for a specified user.
2018-05-16 10:53:14 -04:00
leesoh 8eb56b29f4 Initial commit 2018-05-15 12:44:51 -06:00
leesoh f9ae5f7dd2 Remove default port from meterpreter and template 2018-05-15 11:13:37 -06:00
leesoh 2b4a41733f And we'll do http_com as well 2018-05-15 11:13:24 -06:00
leesoh 9bd923caf8 Remove port from default Host configuration 2018-05-15 11:05:45 -06:00
leesoh d2dc89d0ca Remove default port for http listeners 2018-05-15 11:00:41 -06:00
Chris Ross f4a27dbf65 Merge pull request #1116 from leesoh/more-cert-path
More cert path fixes
2018-05-15 10:12:04 -04:00
Chris Ross ce88725e19 Merge pull request #1112 from ceramicskate0/patch-2
Update helpers.py
2018-05-15 10:10:11 -04:00
Chris Ross 2c41d660b5 Merge pull request #1109 from johneiser/dev-SafeCheckFix
Fix python safe-check from spawning zombie process
2018-05-15 09:51:22 -04:00
Chris Ross 8a52c0ceb5 Merge pull request #1108 from johneiser/dev-OsxShellcode
Added osx shellcode stager
2018-05-15 09:28:27 -04:00
leesoh 21f7b47e53 Add missing info that was causing searchmodule to break 2018-05-14 17:25:26 -06:00
leesoh 94fab9b04b Implement certpath fix for http_mapi 2018-05-11 16:28:52 -06:00
leesoh 9cab85faa6 Implement certpath fix for http_com 2018-05-11 16:25:35 -06:00
Ceramicskate0 bf8eca9b2b Update helpers.py 2018-05-08 06:40:43 -05:00
Rahmat Nurfauzi a18aaf60ad Fix Agent Cookie 2018-05-08 06:20:46 +07:00
Rahmat Nurfauzi 992c88f114 Merge branch 'dev' into dev 2018-05-07 22:59:01 +07:00
Rahmat Nurfauzi 2e58e25dc9 Update http.py 2018-05-07 22:55:16 +07:00
Rahmat Nurfauzi 64d9ca4619 Update http.py 2018-05-07 22:54:57 +07:00
chris 142e9b2236 Merge branch 'dev' of https://github.com/EmpireProject/Empire into dev 2018-05-06 14:28:07 -04:00
chris 9689c712db Fix conflicts 2018-05-06 14:27:20 -04:00