807 Commits

Author SHA1 Message Date
xorrior e65e15c982 Removed ls_m and shellb modules for python 2018-03-11 15:23:37 -04:00
xorrior 181406fbcc Removed shellb command 2018-03-06 13:13:44 -05:00
xorrior aecdec6bd7 Added opsec-safe aliases for ls, pwd, rm, mkdir, whoami, getuid. Renamed sc command to osx_screenshot 2018-03-06 13:10:40 -05:00
xorrior 5eaf06a434 update shell stager logic 2018-03-04 02:10:55 -05:00
xorrior 666710dee6 Fix send-message function def 2018-03-03 21:11:11 -05:00
xorrior 204601df12 Merge with Dev 2018-03-03 10:17:27 -05:00
xorrior 3911cec9af Added sRDI License 2018-03-02 08:54:35 -05:00
xorrior 320fe957d1 Added shellcode stager w/ sRDI project from @monogas 2018-03-02 00:12:41 -05:00
xorrior 927fb957ca Update comments 2018-02-27 18:00:32 -05:00
xorrior 8fcfbacc5c Merge branch 'feature/desktopfile' of https://github.com/jarrodcoulter/Empire into jarrodcoulter-feature/desktopfile 2018-02-27 15:04:21 -05:00
jarrodcoulter 8c99cb4c07 Updated based on Feedback
Removed variable names starting with a capital and added remove.lower() to match on lowercase true as well as True.
2018-02-23 06:48:12 -06:00
Dakota Nelson a68252791a Better message for CertPath errors, see #775 2018-02-22 19:06:40 -08:00
jarrodcoulter d73f62a22d Update Comments
Re-added comments for references.
2018-02-20 09:42:50 -06:00
jarrodcoulter 20222d9b5d Update desktopfile to add Remove capability
Added a section to improve the Desktop file persistence by letting the use remove previous persistence mechanisms. Checks to see if the FileName exists and if so removes it.
2018-02-20 09:22:48 -06:00
xorrior 6acf71c7b7 Fix for #969 2018-02-18 15:46:19 -05:00
xorrior 3c29386612 Small modification to trollsploit/wallpaper module 2018-02-18 15:18:04 -05:00
Chris Ross 32b5269a37 Merge pull request #978 from jarrodcoulter/feature/desktopfile
Add Linux Persistence through Autostart
2018-02-11 23:56:05 -05:00
Chris Ross d8d249758d Merge pull request #974 from ThePirateWhoSmellsOfSunflowers/allow_minidump_without_admin
Modify minidump module to allow non-admin to dump process
2018-02-11 21:53:01 -05:00
Chris Ross 1f07e37180 Merge pull request #964 from s0lst1c3/dev
http_com Listener now evades Nessus plugin 99592
2018-02-11 00:27:41 -05:00
xorrior 9d5c90bc9c Merge branch 'dev' of https://github.com/EmpireProject/Empire into dev 2018-02-11 00:16:57 -05:00
xorrior 8310971735 Added threading lock 2018-02-11 00:15:38 -05:00
xorrior d65badfd16 Merge branch 'dev' of https://github.com/bneg/Empire into bneg-dev 2018-02-10 22:44:04 -05:00
jarrodcoulter 1f58041d45 Add Linux Persistence through Autostart
Creating persistence by adding the python launcher to the ~/.config/autostart directory. This is based on the CrossRat analysis (https://digitasecurity.com/blog/2018/01/23/crossrat/) and the other links in the comments.
Tested in Ubuntu 16 and Oracle Linux 7.
2018-02-09 11:15:04 -06:00
Chris Ross 683bca8bcc Merge pull request #949 from elitest/empire-cs
Add support for C# launcher
2018-02-08 21:57:43 -05:00
Chris Ross ceb9af77b8 Merge pull request #947 from ThePirateWhoSmellsOfSunflowers/fix_invoke_psexec
fix the invoke_psexec module
2018-02-08 21:14:20 -05:00
Chris Ross e7389dedcd Merge pull request #975 from EmpireProject/downloads_fix
Reverted to old downloads method. Removed unnecessary code. fixed log…
2018-02-08 20:17:49 -05:00
ThePirateWhoSmellsOfSunflowers ce561cb9c9 Fix the logic if both ProcessName and ProcessId are specified 2018-02-08 14:42:46 +01:00
ThePirateWhoSmellsOfSunflowers 1b7e04a042 Modify minidump module to allow non-admin to dump process 2018-02-07 17:03:37 +01:00
Chris Ross 1f9aada0ca Merge pull request #972 from EmpireProject/powerview_fix
Powerview fix
2018-02-07 01:41:09 -05:00
xorrior ef7c414ee9 Fix for #940 2018-02-07 01:38:12 -05:00
Gabriel Ryan 5b45cf3f42 http_com Listener now evades Nessus plugin 99592
The http_com Listener now evades Nessus plugin 99592, which uses signature-based methods to identify Empire http_com Listeners. The following enhancements were added to the http_com Listener in order to accomplish this:

 - The http_com Listener behaves more like a “real” web server (making its signature more generic)
 - Hardcoded text specific to Werkzeug and Empire has been replaced by generic content
 - The Content-Length for default and error pages is now randomly set on startup
2018-02-01 02:07:25 -05:00
bneg 7388fed540 Fixed db connection 2018-01-27 21:11:32 -08:00
xorrior e27bf23db6 Added tab completion for enable, disable, and delete 2018-01-27 21:47:40 -05:00
xorrior 113ccb2a48 Merge branch 'listener-management' of https://github.com/mr64bit/Empire into mr64bit-listener-management 2018-01-27 21:09:14 -05:00
xorrior df0d1927a2 Change Background to True for both modules 2018-01-27 18:56:08 -05:00
bneg aa9e4584a6 Add "report" to main menu, adding some simple reporting 2018-01-27 15:53:44 -08:00
xorrior 184208c964 Merge branch 'dev' of https://github.com/retro-engineer/Empire into retro-engineer-dev 2018-01-27 18:38:51 -05:00
mr64bit 3ff2e610ab Oops, should be empty string for un-setting option 2018-01-25 14:40:29 -05:00
mr64bit 017498e37e Add feature to directly delete a listener from the database
Add feature to unset listener option
Move edit warning do_edit() so it's not shown when edits are called
directly by the user
2018-01-25 14:40:29 -05:00
mr64bit 3bff4e6ef2 Added ability to enable/disable listeners, so they are still stored in the
database, but will not start automatically.
Also, listener options can now be edited without deleting the listener
and starting a new one from scratch.
2018-01-25 14:40:29 -05:00
Jim Shaver 94ceb0df58 Added moved csharp launcher. 2018-01-22 09:51:51 -06:00
Jim Shaver 7bb1879d39 Clarified purpose 2018-01-22 08:26:13 -06:00
Jim Shaver 81487f672e Add support for C# launcher 2018-01-21 03:16:42 -06:00
ThePirateWhoSmellsOfSunflowers 7d04f6e8b8 fix the module 2018-01-19 15:00:02 +01:00
xorrior 0bd067c380 Fix stager generation logic 2018-01-15 22:18:08 -05:00
xorrior a34fdcfeb0 Merge branch 'master' of https://github.com/nikaiw/Empire into nikaiw-master 2018-01-15 21:55:05 -05:00
xorrior eb8d4b8ad1 Resolved conflict 2018-01-15 20:45:33 -05:00
xorrior 7303a4e089 Merge branch 'DakotaNelson-template-path' into dev 2018-01-11 18:31:54 -05:00
NK bfc793a7f6 Fix: none proxy value really means no proxy
Usefull when outgoing connexion is less filtered than proxy ones.
2018-01-10 19:41:22 +01:00
xorrior aba0cbfb94 Additional patch for launcher generation with dbx listener 2018-01-07 19:24:06 -05:00