35 Commits

Author SHA1 Message Date
ret2lib fcd1a3d32b fix keylogger for newer ruby + stderr redirection
This will add support for fiddle which is recommended instead of 'DL'. Versions 2.3 and above will use Fiddle, while versions before that will use DL. This will log stderr to logfile as well instead of outputing to terminal (better opsec)
2018-08-13 02:41:21 -04:00
xorrior 1957c28368 Merge branch 'master' of https://github.com/import-au/Empire into import-au-master 2018-03-14 13:43:02 -04:00
import-au 1f2c9324d2 Modified verbiage for Version. Added exception handling. 2018-03-08 10:36:20 -05:00
import-au 81cbcf890e Renamed new keychain module 2018-03-08 10:36:20 -05:00
import-au 2999dbbf13 Keychain dump fixed. 2018-03-08 10:36:20 -05:00
import-au bc310d9c0e Fixed osx/situationalawareness
osx/macro now properly supports older and newer variants of Office
Working on keychaindump_sandbox
2018-03-08 10:36:20 -05:00
Adam Gold 691882a84f Dump decrypted keychain 2018-03-08 10:34:36 -05:00
Chris Ross e2ea55835a Merge pull request #893 from s0lst1c3/dev
Module Added: osx_mic_record (resolves #865)
2018-01-07 19:05:31 -05:00
Gabriel Ryan 94f371fbc2 Module now uses pyobjc script instead of stand-alone binary for microphone capture. 2018-01-04 06:34:12 -06:00
xorrior 8895e13a6c Merge branch 'dev' into kerberoast-fix
Conflicts:
	.circleci/config.yml
	changelog
	empire
	lib/common/stagers.py
2018-01-02 15:42:08 -05:00
Gabriel Ryan 10e3370f26 Module Added: osx_mic_record (resolves #865)
Adds a module that records audio through the MacOS webcam mic. Audio is recorded using a custom binary that interacts directly with the Apple AVFoundation API (source: https://github.com/s0lst1c3/osx_mic_record). Resolves #865.
2017-12-31 15:55:46 -06:00
xorrior 0ed51ae1c4 Removed print statements from screensaver_alleyoop module 2017-12-13 20:02:18 -05:00
xorrior 16e4467557 Added background shell exec 2017-11-29 19:06:55 -05:00
xorrior eea19fced5 Added native_screenshot_mss module 2017-11-29 14:52:32 -05:00
xorrior 87ec0ff9aa Added native_screenshot_mss module 2017-11-29 14:51:48 -05:00
xorrior 3558acba42 Swapped native_screenshot module. Now uses python-mss and drops image to disk 2017-11-29 14:10:14 -05:00
xorrior d615e99352 Swapped native_screenshot module. Now uses python-mss and drops image to disk 2017-11-29 14:08:12 -05:00
xorrior 95d8142b39 Remove debug message from xkeylogger module 2017-10-23 21:17:08 -04:00
Chris Ross 544a0ee282 Merge pull request #718 from nikaiw/dev
Fix PR (generate function signature, opsec value)
2017-10-18 14:46:10 -04:00
Nikaiw 00b8427f9b Fix PR (generate function signature, opsec value) 2017-09-24 19:17:26 +02:00
xorrior de03f902ec Repaired function definition for generate() 2017-09-21 22:59:08 -04:00
Drew Varner 332b78d07c Fix shebangs
Move shebangs to /usr/bin/env foo
2017-08-16 01:41:22 -04:00
rvrsh3ll 8c834a9e5b Changed Needs admin to true 2017-08-15 10:48:07 -04:00
rvrsh3ll 517508d0d6 Add mimipenguin 2017-07-31 17:34:56 -04:00
disk0nn3ct 7074616113 Added 'SandboxMode' option to evade Apple Sandbox protections on applescript 2017-06-13 23:34:50 -06:00
ThePirateWhoSmellsOfSunflowers 51082a66fc Fix harcoded path, should resolv #465 2017-04-06 20:02:00 +02:00
killswitch-gui dd6a8d4450 change imports 2017-02-08 11:55:57 -05:00
killswitch-gui beca8fa1a9 add in ability to set interface 2017-02-08 09:31:38 -05:00
killswitch-gui 0ff5a98dd9 add osx sniffer/fix sudospawn 2017-02-07 23:50:01 -05:00
Chris 4b79172d13 Removed unnecessary imports for Foundation and LaunchServices 2017-01-09 20:59:14 -05:00
Chris 3e7c2b9dea Removed Foundation import. Unnecessary. 2017-01-09 20:54:31 -05:00
Chris bfd9ee1413 Changed native_screenshot to be opsec safe. Added safe aliases for screenshot, ls, whoami 2017-01-07 22:15:20 -05:00
Chris e5bf468158 Fix for issue #382. Fixed downloads in python agent. updated install script to include zlib_wrapper module. 2017-01-04 22:39:37 -05:00
Chris 2d96a72460 Swapped native_screenshot with screenshot source. Modules were named improperly 2016-12-10 22:48:13 -05:00
HarmJ0y 26cd0089dd 2.0.0 beta, DerbyCon release 2016-09-23 14:04:35 -04:00