108 Commits

Author SHA1 Message Date
xorrior 5eaf06a434 update shell stager logic 2018-03-04 02:10:55 -05:00
xorrior 320fe957d1 Added shellcode stager w/ sRDI project from @monogas 2018-03-02 00:12:41 -05:00
xorrior 3c29386612 Small modification to trollsploit/wallpaper module 2018-02-18 15:18:04 -05:00
Chris Ross d8d249758d Merge pull request #974 from ThePirateWhoSmellsOfSunflowers/allow_minidump_without_admin
Modify minidump module to allow non-admin to dump process
2018-02-11 21:53:01 -05:00
Chris Ross ceb9af77b8 Merge pull request #947 from ThePirateWhoSmellsOfSunflowers/fix_invoke_psexec
fix the invoke_psexec module
2018-02-08 21:14:20 -05:00
ThePirateWhoSmellsOfSunflowers ce561cb9c9 Fix the logic if both ProcessName and ProcessId are specified 2018-02-08 14:42:46 +01:00
ThePirateWhoSmellsOfSunflowers 1b7e04a042 Modify minidump module to allow non-admin to dump process 2018-02-07 17:03:37 +01:00
xorrior ef7c414ee9 Fix for #940 2018-02-07 01:38:12 -05:00
ThePirateWhoSmellsOfSunflowers 7d04f6e8b8 fix the module 2018-01-19 15:00:02 +01:00
xorrior 8895e13a6c Merge branch 'dev' into kerberoast-fix
Conflicts:
	.circleci/config.yml
	changelog
	empire
	lib/common/stagers.py
2018-01-02 15:42:08 -05:00
Liam Somerville 049cc5e527 Update to fix error
Fixes `!] Exception: Stagers instance has no attribute 'installPath'` when running.
2017-12-07 14:22:22 -07:00
Dan McInerney edf040e690 Update get_sql_column_sample_data.py
When CheckAll is not true the script didn't assign the str variable scriptEnd prior to trying to add to it with +=.
2017-11-14 14:06:17 -05:00
xorrior c13ae0dee5 Updated powerview.ps1 and corresponding modules 2017-11-14 11:18:59 -05:00
rvrsh3ll a5bbc78b9c Update Invoke-DCOM 2017-11-12 16:01:52 -05:00
rvrsh3ll 6f239d4fc8 Added Kevin Robertson's Invoke-SMBExec.ps1 2017-11-12 15:45:40 -05:00
Chris Ross d1b968330d Merge pull request #768 from mlinton/patch-4
Create Keys.py to extract private keys
2017-11-08 23:44:15 -05:00
Liam Somerville 8b6b9ef1c8 Fix flag - listener is required. 2017-11-08 10:44:15 -07:00
xorrior 6d67f23119 Fix for #777 2017-10-28 11:11:34 -04:00
root 8c7310adb1 fix broken call to generate by invoke-obfuscation changes 2017-10-26 13:04:15 -07:00
mlinton d04fd95df1 Update keys.py 2017-10-22 19:20:15 -06:00
xorrior 2c7d62593b Updated obfuscate function arguments in all powershell modules 2017-10-20 23:16:19 -04:00
mlinton 3920ef8e74 Create Keys.py to extract private keys
Copying the certificate functionality in mimi to also extract private keys.
2017-10-20 15:45:23 -06:00
Chris Ross fb8778a103 Merge branch 'dev' into ntsd 2017-10-20 01:46:45 -04:00
root a645d461ef changes to the invoke_ntsd module 2017-10-19 11:10:39 -04:00
root 999970e96a pushing module for ntsd code exec 2017-10-16 10:23:41 -04:00
xorrior 4aea7272f0 Merged with master 2017-10-12 12:15:44 -04:00
Steve Borosh 5e92df645c Merge pull request #722 from hightopfade/dev
generate_upload function added to Stagers
2017-09-30 17:05:23 -04:00
rvrsh3ll b720b7996e Add stager option and bypass uac module 2017-09-26 10:13:21 -04:00
root 930bc09be2 added generate upload function and example code 2017-09-25 10:10:10 -04:00
Steve Borosh 20c17423fd Merge pull request #711 from clr2of8/dev
Modified the PowerShell keylogger to write to local file instead of stdout
2017-09-23 08:39:19 -04:00
Carrie Roberts a2ef7dab9d Modified the PowerShell keylogger to write to local file instead of stdout 2017-09-20 15:22:10 -06:00
xorrior 55834180d4 Fix powerbreach modules 2017-09-20 16:27:05 -04:00
xorrior b1c359e4b9 Fix powerbreach modules 2017-09-20 16:22:04 -04:00
Carrie Roberts 932aedb4aa added option to expand powershell object in order to view domain policy details 2017-09-19 12:08:51 -06:00
xorrior df64b1e6d1 Rest fix from #657 2017-09-06 11:14:36 -04:00
Chris Ross 2677363e50 Merge pull request #657 from byt3bl33d3r/master
Removed GroupName as required option in get_group_member module,  reverted a commit that broke the RESTful API
2017-09-06 10:41:45 -04:00
xorrior cda37e726d Added Limit option to computerdetails module 2017-08-31 21:06:24 -04:00
rvrsh3ll 463cfbd784 Obfuscation fix for MS16-135 module 2017-08-29 17:02:21 -04:00
Steve Borosh 285e993f56 Update exploit_eternalblue.py
Fixed per Invoke-Obfuscation requirements.
2017-08-28 21:32:11 -04:00
byt3bl33d3r 35f4b06fa8 Removed GroupName as required option in get_group_member module 2017-08-28 18:09:26 -06:00
Chris Ross d76d8c924d Merge pull request #609 from winnie22/uaclevel
show current UAC level
2017-08-28 00:15:12 -04:00
Chris Ross cbe1bc508d Merge pull request #596 from winnie22/dev
Collection of bypass UAC modules based on fodhelper.exe, SDCLT and schtasks technique
2017-08-28 00:09:30 -04:00
Petr Medonos cb64325538 Obfuscated empire changes 2017-08-11 09:41:23 +02:00
Petr Medonos 75cc9c00b5 Obfuscated empire changes 2017-08-11 09:33:04 +02:00
Petr Medonos 59d86e4598 show current UAC level 2017-07-11 20:41:17 +02:00
Petr Medonos e68987ec7f Bypasses UAC based on James Forshaw findings 2017-07-04 12:56:56 +02:00
Petr Medonos 82d20934e0 opsec fix 2017-07-04 10:26:53 +02:00
Petr Medonos bdb89bd1cb UAC Bypass based on enigma0x3 SDCLT technique 2017-07-03 15:50:15 +02:00
Petr Medonos fe15c4f305 changed opsec safe to false 2017-06-30 06:55:23 +02:00
cobbr e59364efcc Merge latest Empire-dev changes 2017-06-29 22:11:01 -05:00