xorrior
e65e15c982
Removed ls_m and shellb modules for python
2018-03-11 15:23:37 -04:00
xorrior
181406fbcc
Removed shellb command
2018-03-06 13:13:44 -05:00
xorrior
aecdec6bd7
Added opsec-safe aliases for ls, pwd, rm, mkdir, whoami, getuid. Renamed sc command to osx_screenshot
2018-03-06 13:10:40 -05:00
xorrior
5eaf06a434
update shell stager logic
2018-03-04 02:10:55 -05:00
xorrior
666710dee6
Fix send-message function def
2018-03-03 21:11:11 -05:00
xorrior
204601df12
Merge with Dev
2018-03-03 10:17:27 -05:00
xorrior
3911cec9af
Added sRDI License
2018-03-02 08:54:35 -05:00
xorrior
320fe957d1
Added shellcode stager w/ sRDI project from @monogas
2018-03-02 00:12:41 -05:00
xorrior
927fb957ca
Update comments
2018-02-27 18:00:32 -05:00
xorrior
8fcfbacc5c
Merge branch 'feature/desktopfile' of https://github.com/jarrodcoulter/Empire into jarrodcoulter-feature/desktopfile
2018-02-27 15:04:21 -05:00
jarrodcoulter
8c99cb4c07
Updated based on Feedback
...
Removed variable names starting with a capital and added remove.lower() to match on lowercase true as well as True.
2018-02-23 06:48:12 -06:00
Dakota Nelson
a68252791a
Better message for CertPath errors, see #775
2018-02-22 19:06:40 -08:00
jarrodcoulter
d73f62a22d
Update Comments
...
Re-added comments for references.
2018-02-20 09:42:50 -06:00
jarrodcoulter
20222d9b5d
Update desktopfile to add Remove capability
...
Added a section to improve the Desktop file persistence by letting the use remove previous persistence mechanisms. Checks to see if the FileName exists and if so removes it.
2018-02-20 09:22:48 -06:00
xorrior
6acf71c7b7
Fix for #969
2018-02-18 15:46:19 -05:00
xorrior
3c29386612
Small modification to trollsploit/wallpaper module
2018-02-18 15:18:04 -05:00
Chris Ross
32b5269a37
Merge pull request #978 from jarrodcoulter/feature/desktopfile
...
Add Linux Persistence through Autostart
2018-02-11 23:56:05 -05:00
Chris Ross
d8d249758d
Merge pull request #974 from ThePirateWhoSmellsOfSunflowers/allow_minidump_without_admin
...
Modify minidump module to allow non-admin to dump process
2018-02-11 21:53:01 -05:00
Chris Ross
1f07e37180
Merge pull request #964 from s0lst1c3/dev
...
http_com Listener now evades Nessus plugin 99592
2018-02-11 00:27:41 -05:00
xorrior
9d5c90bc9c
Merge branch 'dev' of https://github.com/EmpireProject/Empire into dev
2018-02-11 00:16:57 -05:00
xorrior
8310971735
Added threading lock
2018-02-11 00:15:38 -05:00
xorrior
d65badfd16
Merge branch 'dev' of https://github.com/bneg/Empire into bneg-dev
2018-02-10 22:44:04 -05:00
jarrodcoulter
1f58041d45
Add Linux Persistence through Autostart
...
Creating persistence by adding the python launcher to the ~/.config/autostart directory. This is based on the CrossRat analysis (https://digitasecurity.com/blog/2018/01/23/crossrat/ ) and the other links in the comments.
Tested in Ubuntu 16 and Oracle Linux 7.
2018-02-09 11:15:04 -06:00
Chris Ross
683bca8bcc
Merge pull request #949 from elitest/empire-cs
...
Add support for C# launcher
2018-02-08 21:57:43 -05:00
Chris Ross
ceb9af77b8
Merge pull request #947 from ThePirateWhoSmellsOfSunflowers/fix_invoke_psexec
...
fix the invoke_psexec module
2018-02-08 21:14:20 -05:00
Chris Ross
e7389dedcd
Merge pull request #975 from EmpireProject/downloads_fix
...
Reverted to old downloads method. Removed unnecessary code. fixed log…
2018-02-08 20:17:49 -05:00
ThePirateWhoSmellsOfSunflowers
ce561cb9c9
Fix the logic if both ProcessName and ProcessId are specified
2018-02-08 14:42:46 +01:00
ThePirateWhoSmellsOfSunflowers
1b7e04a042
Modify minidump module to allow non-admin to dump process
2018-02-07 17:03:37 +01:00
Chris Ross
1f9aada0ca
Merge pull request #972 from EmpireProject/powerview_fix
...
Powerview fix
2018-02-07 01:41:09 -05:00
xorrior
ef7c414ee9
Fix for #940
2018-02-07 01:38:12 -05:00
Gabriel Ryan
5b45cf3f42
http_com Listener now evades Nessus plugin 99592
...
The http_com Listener now evades Nessus plugin 99592, which uses signature-based methods to identify Empire http_com Listeners. The following enhancements were added to the http_com Listener in order to accomplish this:
- The http_com Listener behaves more like a “real” web server (making its signature more generic)
- Hardcoded text specific to Werkzeug and Empire has been replaced by generic content
- The Content-Length for default and error pages is now randomly set on startup
2018-02-01 02:07:25 -05:00
bneg
7388fed540
Fixed db connection
2018-01-27 21:11:32 -08:00
xorrior
e27bf23db6
Added tab completion for enable, disable, and delete
2018-01-27 21:47:40 -05:00
xorrior
113ccb2a48
Merge branch 'listener-management' of https://github.com/mr64bit/Empire into mr64bit-listener-management
2018-01-27 21:09:14 -05:00
xorrior
df0d1927a2
Change Background to True for both modules
2018-01-27 18:56:08 -05:00
bneg
aa9e4584a6
Add "report" to main menu, adding some simple reporting
2018-01-27 15:53:44 -08:00
xorrior
184208c964
Merge branch 'dev' of https://github.com/retro-engineer/Empire into retro-engineer-dev
2018-01-27 18:38:51 -05:00
mr64bit
3ff2e610ab
Oops, should be empty string for un-setting option
2018-01-25 14:40:29 -05:00
mr64bit
017498e37e
Add feature to directly delete a listener from the database
...
Add feature to unset listener option
Move edit warning do_edit() so it's not shown when edits are called
directly by the user
2018-01-25 14:40:29 -05:00
mr64bit
3bff4e6ef2
Added ability to enable/disable listeners, so they are still stored in the
...
database, but will not start automatically.
Also, listener options can now be edited without deleting the listener
and starting a new one from scratch.
2018-01-25 14:40:29 -05:00
Jim Shaver
94ceb0df58
Added moved csharp launcher.
2018-01-22 09:51:51 -06:00
Jim Shaver
7bb1879d39
Clarified purpose
2018-01-22 08:26:13 -06:00
Jim Shaver
81487f672e
Add support for C# launcher
2018-01-21 03:16:42 -06:00
ThePirateWhoSmellsOfSunflowers
7d04f6e8b8
fix the module
2018-01-19 15:00:02 +01:00
xorrior
0bd067c380
Fix stager generation logic
2018-01-15 22:18:08 -05:00
xorrior
a34fdcfeb0
Merge branch 'master' of https://github.com/nikaiw/Empire into nikaiw-master
2018-01-15 21:55:05 -05:00
xorrior
eb8d4b8ad1
Resolved conflict
2018-01-15 20:45:33 -05:00
xorrior
7303a4e089
Merge branch 'DakotaNelson-template-path' into dev
2018-01-11 18:31:54 -05:00
NK
bfc793a7f6
Fix: none proxy value really means no proxy
...
Usefull when outgoing connexion is less filtered than proxy ones.
2018-01-10 19:41:22 +01:00
xorrior
aba0cbfb94
Additional patch for launcher generation with dbx listener
2018-01-07 19:24:06 -05:00