8c834a9e5b
Changed Needs admin to true
2017-08-15 10:48:07 -04:00
28fa1905ff
Create dyld_print_to_file.py
...
Empire module for exploitation of Mac OSX's CVE-2015-3760 (DYLD_PRINT_TO_FILE) exploit.
2017-08-06 13:04:21 -04:00
517508d0d6
Add mimipenguin
2017-07-31 17:34:56 -04:00
7074616113
Added 'SandboxMode' option to evade Apple Sandbox protections on applescript
2017-06-13 23:34:50 -06:00
a5b9f44cad
Moved socks module
2017-04-20 21:21:39 -04:00
042f24ab3b
Merge pull request #478 from klustic/2.0_beta
...
Added a module for SOCKSv5 proxying
2017-04-20 21:17:48 -04:00
287ecd3f0a
Merge pull request #452 from n00py/2.0_beta
...
VNC Inject
2017-04-09 16:08:41 -04:00
51082a66fc
Fix harcoded path, should resolv #465
2017-04-06 20:02:00 +02:00
05dae225b6
Added a new module for SOCKSv5 proxying
...
When executed, this module connects back to a designated AlmondRocks server under SSL. The AlmondRocks server acts as a SOCKSv5 proxy, and multiplexes all SOCKS communications over the single SSL connection to/through the target, enabling any SOCKSv5 client (e.g. curl, proxychains) to extend past NAT devices into the target network.
This is based on the following work:
https://github.com/klustic/AlmondRocks
** Server Usage **
$ ./almondrocks.py server -d -t 4433 --cert cert.pem --key key.pem
** Empire Usage **
set HOST 192.168.20.10
set PORT 4433
set Agent ...
2017-04-05 10:24:31 -06:00
b8f0bb2bbd
Added module for enabling ARD
2017-02-10 08:38:46 -07:00
dd6a8d4450
change imports
2017-02-08 11:55:57 -05:00
beca8fa1a9
add in ability to set interface
2017-02-08 09:31:38 -05:00
0ff5a98dd9
add osx sniffer/fix sudospawn
2017-02-07 23:50:01 -05:00
4b79172d13
Removed unnecessary imports for Foundation and LaunchServices
2017-01-09 20:59:14 -05:00
3e7c2b9dea
Removed Foundation import. Unnecessary.
2017-01-09 20:54:31 -05:00
bfd9ee1413
Changed native_screenshot to be opsec safe. Added safe aliases for screenshot, ls, whoami
2017-01-07 22:15:20 -05:00
e5bf468158
Fix for issue #382 . Fixed downloads in python agent. updated install script to include zlib_wrapper module.
2017-01-04 22:39:37 -05:00
2d96a72460
Swapped native_screenshot with screenshot source. Modules were named improperly
2016-12-10 22:48:13 -05:00
d2179b7042
removed some dcos modules, recommended to now use the http rest api module
2016-11-20 18:23:30 +00:00
e1fa30c14f
added etcd crawler module
2016-11-20 18:11:55 +00:00
a52b680445
added http rest api module
2016-11-20 18:04:31 +00:00
26c8839edf
Update bashdoor.py
...
Removed iTunes subdirectory
2016-10-11 09:40:54 -07:00
3f39272711
new module bashdoor
2016-10-10 13:53:48 -07:00
f7dd1c11e3
removed default trigger
2016-10-08 12:51:46 -07:00
5ac6b9cf00
modified mail
2016-10-08 12:47:03 -07:00
1ae3fb906c
Merge remote-tracking branch 'origin/2.0_beta' into 2.0_beta
...
# Conflicts:
# lib/modules/python/persistence/osx/mail.py
2016-10-08 12:46:25 -07:00
17e97360ff
new modules
2016-10-08 12:45:44 -07:00
2c5d7f5373
Delete mail.py
2016-10-08 11:19:51 -07:00
06d580e69a
new modules
2016-10-07 22:04:58 -07:00
236d303da3
new modules
2016-10-07 20:52:42 -07:00
c23ceac128
new modules
2016-10-07 20:38:27 -07:00
16d0df5f04
new modules
2016-10-07 20:38:07 -07:00
e93ef08055
Updated Dylib templates. Removed hijacker generation from dylib stager menu. Added additional error checking to the HijackScanner module
2016-10-05 12:40:29 -04:00
26cd0089dd
2.0.0 beta, DerbyCon release
2016-09-23 14:04:35 -04:00
rvrsh3ll