ret2lib
fcd1a3d32b
fix keylogger for newer ruby + stderr redirection
...
This will add support for fiddle which is recommended instead of 'DL'. Versions 2.3 and above will use Fiddle, while versions before that will use DL. This will log stderr to logfile as well instead of outputing to terminal (better opsec)
2018-08-13 02:41:21 -04:00
xorrior
1957c28368
Merge branch 'master' of https://github.com/import-au/Empire into import-au-master
2018-03-14 13:43:02 -04:00
import-au
1f2c9324d2
Modified verbiage for Version. Added exception handling.
2018-03-08 10:36:20 -05:00
import-au
81cbcf890e
Renamed new keychain module
2018-03-08 10:36:20 -05:00
import-au
2999dbbf13
Keychain dump fixed.
2018-03-08 10:36:20 -05:00
import-au
bc310d9c0e
Fixed osx/situationalawareness
...
osx/macro now properly supports older and newer variants of Office
Working on keychaindump_sandbox
2018-03-08 10:36:20 -05:00
Adam Gold
691882a84f
Dump decrypted keychain
2018-03-08 10:34:36 -05:00
Chris Ross
e2ea55835a
Merge pull request #893 from s0lst1c3/dev
...
Module Added: osx_mic_record (resolves #865 )
2018-01-07 19:05:31 -05:00
Gabriel Ryan
94f371fbc2
Module now uses pyobjc script instead of stand-alone binary for microphone capture.
2018-01-04 06:34:12 -06:00
xorrior
8895e13a6c
Merge branch 'dev' into kerberoast-fix
...
Conflicts:
.circleci/config.yml
changelog
empire
lib/common/stagers.py
2018-01-02 15:42:08 -05:00
Gabriel Ryan
10e3370f26
Module Added: osx_mic_record ( resolves #865 )
...
Adds a module that records audio through the MacOS webcam mic. Audio is recorded using a custom binary that interacts directly with the Apple AVFoundation API (source: https://github.com/s0lst1c3/osx_mic_record ). Resolves #865 .
2017-12-31 15:55:46 -06:00
xorrior
0ed51ae1c4
Removed print statements from screensaver_alleyoop module
2017-12-13 20:02:18 -05:00
xorrior
16e4467557
Added background shell exec
2017-11-29 19:06:55 -05:00
xorrior
eea19fced5
Added native_screenshot_mss module
2017-11-29 14:52:32 -05:00
xorrior
87ec0ff9aa
Added native_screenshot_mss module
2017-11-29 14:51:48 -05:00
xorrior
3558acba42
Swapped native_screenshot module. Now uses python-mss and drops image to disk
2017-11-29 14:10:14 -05:00
xorrior
d615e99352
Swapped native_screenshot module. Now uses python-mss and drops image to disk
2017-11-29 14:08:12 -05:00
xorrior
95d8142b39
Remove debug message from xkeylogger module
2017-10-23 21:17:08 -04:00
Chris Ross
544a0ee282
Merge pull request #718 from nikaiw/dev
...
Fix PR (generate function signature, opsec value)
2017-10-18 14:46:10 -04:00
Nikaiw
00b8427f9b
Fix PR (generate function signature, opsec value)
2017-09-24 19:17:26 +02:00
xorrior
de03f902ec
Repaired function definition for generate()
2017-09-21 22:59:08 -04:00
Drew Varner
332b78d07c
Fix shebangs
...
Move shebangs to /usr/bin/env foo
2017-08-16 01:41:22 -04:00
rvrsh3ll
8c834a9e5b
Changed Needs admin to true
2017-08-15 10:48:07 -04:00
rvrsh3ll
517508d0d6
Add mimipenguin
2017-07-31 17:34:56 -04:00
disk0nn3ct
7074616113
Added 'SandboxMode' option to evade Apple Sandbox protections on applescript
2017-06-13 23:34:50 -06:00
ThePirateWhoSmellsOfSunflowers
51082a66fc
Fix harcoded path, should resolv #465
2017-04-06 20:02:00 +02:00
killswitch-gui
dd6a8d4450
change imports
2017-02-08 11:55:57 -05:00
killswitch-gui
beca8fa1a9
add in ability to set interface
2017-02-08 09:31:38 -05:00
killswitch-gui
0ff5a98dd9
add osx sniffer/fix sudospawn
2017-02-07 23:50:01 -05:00
Chris
4b79172d13
Removed unnecessary imports for Foundation and LaunchServices
2017-01-09 20:59:14 -05:00
Chris
3e7c2b9dea
Removed Foundation import. Unnecessary.
2017-01-09 20:54:31 -05:00
Chris
bfd9ee1413
Changed native_screenshot to be opsec safe. Added safe aliases for screenshot, ls, whoami
2017-01-07 22:15:20 -05:00
Chris
e5bf468158
Fix for issue #382 . Fixed downloads in python agent. updated install script to include zlib_wrapper module.
2017-01-04 22:39:37 -05:00
Chris
2d96a72460
Swapped native_screenshot with screenshot source. Modules were named improperly
2016-12-10 22:48:13 -05:00
HarmJ0y
26cd0089dd
2.0.0 beta, DerbyCon release
2016-09-23 14:04:35 -04:00