admin/EmpireProject-Empire
1
0
Fork 0
mirror of https://github.com/EmpireProject/Empire synced 2026-06-08 10:58:16 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,393 Commits 10 Branches 13 Tags
php_fix
Commit Graph

68 Commits

Author SHA1 Message Date
xorrior e65e15c982 Removed ls_m and shellb modules for python 2018-03-11 15:23:37 -04:00
xorrior 927fb957ca Update comments 2018-02-27 18:00:32 -05:00
jarrodcoulter 8c99cb4c07 Updated based on Feedback 
Removed variable names starting with a capital and added remove.lower() to match on lowercase true as well as True.
 2018-02-23 06:48:12 -06:00
jarrodcoulter d73f62a22d Update Comments 
Re-added comments for references.
 2018-02-20 09:42:50 -06:00
jarrodcoulter 20222d9b5d Update desktopfile to add Remove capability 
Added a section to improve the Desktop file persistence by letting the use remove previous persistence mechanisms. Checks to see if the FileName exists and if so removes it.
 2018-02-20 09:22:48 -06:00
jarrodcoulter 1f58041d45 Add Linux Persistence through Autostart 
Creating persistence by adding the python launcher to the ~/.config/autostart directory. This is based on the CrossRat analysis (https://digitasecurity.com/blog/2018/01/23/crossrat/) and the other links in the comments.
Tested in Ubuntu 16 and Oracle Linux 7.
 2018-02-09 11:15:04 -06:00
xorrior df0d1927a2 Change Background to True for both modules 2018-01-27 18:56:08 -05:00
xorrior 184208c964 Merge branch 'dev' of https://github.com/retro-engineer/Empire into retro-engineer-dev 2018-01-27 18:38:51 -05:00
Chris Ross e2ea55835a Merge pull request #893 from s0lst1c3/dev 
Module Added: osx_mic_record (resolves #865)
 2018-01-07 19:05:31 -05:00
Peter Toth e6ea80e18e More robust password prompt handler 
Some SSH clients used a more verbose password prompt: "Password for user@pfSense.domain.local:". This patch makes the parent process wait for any string starting with "Password" and ending with ":"
 2018-01-04 16:13:51 +01:00
Gabriel Ryan 94f371fbc2 Module now uses pyobjc script instead of stand-alone binary for microphone capture. 2018-01-04 06:34:12 -06:00
xorrior 8895e13a6c Merge branch 'dev' into kerberoast-fix 
Conflicts:
	.circleci/config.yml
	changelog
	empire
	lib/common/stagers.py
 2018-01-02 15:42:08 -05:00
Gabriel Ryan 10e3370f26 Module Added: osx_mic_record (resolves #865) 
Adds a module that records audio through the MacOS webcam mic. Audio is recorded using a custom binary that interacts directly with the Apple AVFoundation API (source: https://github.com/s0lst1c3/osx_mic_record). Resolves #865.
 2017-12-31 15:55:46 -06:00
xorrior 0ed51ae1c4 Removed print statements from screensaver_alleyoop module 2017-12-13 20:02:18 -05:00
Chris Ross 8ddeb63137 Merge pull request #844 from kost/fixemptybomutils 
Fix empty bomutils folder
 2017-12-03 01:21:34 -05:00
xorrior 6ddba3f0ee Fixed ls_m module generate function sig 2017-11-30 18:26:47 -08:00
xorrior 99a9a4a6fa Renamed osx ls module 2017-11-30 18:24:34 -08:00
xorrior 5c69be36c1 Fixed ls_m module generate function sig 2017-11-30 06:09:26 -08:00
xorrior e39f8d423a Renamed osx ls module 2017-11-30 06:05:14 -08:00
xorrior 16e4467557 Added background shell exec 2017-11-29 19:06:55 -05:00
xorrior eea19fced5 Added native_screenshot_mss module 2017-11-29 14:52:32 -05:00
xorrior 87ec0ff9aa Added native_screenshot_mss module 2017-11-29 14:51:48 -05:00
xorrior 3558acba42 Swapped native_screenshot module. Now uses python-mss and drops image to disk 2017-11-29 14:10:14 -05:00
xorrior d615e99352 Swapped native_screenshot module. Now uses python-mss and drops image to disk 2017-11-29 14:08:12 -05:00
xorrior 95d8142b39 Remove debug message from xkeylogger module 2017-10-23 21:17:08 -04:00
Chris Ross 06f87cc6ee Merge pull request #762 from elitest/Empyre-Empire 
Code cleanup from Empyre merge
 2017-10-18 18:47:55 -04:00
Chris Ross 544a0ee282 Merge pull request #718 from nikaiw/dev 
Fix PR (generate function signature, opsec value)
 2017-10-18 14:46:10 -04:00
Jim Shaver 20519e45be Migrated from Empyre to Empire in the code. 2017-10-17 18:30:13 -05:00
xorrior 4aea7272f0 Merged with master 2017-10-12 12:15:44 -04:00
Nikaiw 00b8427f9b Fix PR (generate function signature, opsec value) 2017-09-24 19:17:26 +02:00
xorrior de03f902ec Repaired function definition for generate() 2017-09-21 22:59:08 -04:00
jarrodcoulter 14efafd5a1 Update Crontab.py 
Updated the crontab persistence so that the Hour option sets the Hour rather than the minute option. This make the crontab execute every 24 hours rather than ever x minutes.
 2017-08-30 14:59:50 -04:00
xorrior be117d4ca3 Update generate function for all python modules 2017-08-28 11:14:44 -04:00
Drew Varner 332b78d07c Fix shebangs 
Move shebangs to /usr/bin/env foo
 2017-08-16 01:41:22 -04:00
rvrsh3ll 8c834a9e5b Changed Needs admin to true 2017-08-15 10:48:07 -04:00
checkyfuntime 28fa1905ff Create dyld_print_to_file.py 
Empire module for exploitation of Mac OSX's CVE-2015-3760 (DYLD_PRINT_TO_FILE) exploit.
 2017-08-06 13:04:21 -04:00
rvrsh3ll 517508d0d6 Add mimipenguin 2017-07-31 17:34:56 -04:00
disk0nn3ct 7074616113 Added 'SandboxMode' option to evade Apple Sandbox protections on applescript 2017-06-13 23:34:50 -06:00
a5b9f44cad Moved socks module 2017-04-20 21:21:39 -04:00
Chris Ross 042f24ab3b Merge pull request #478 from klustic/2.0_beta 
Added a module for SOCKSv5 proxying
 2017-04-20 21:17:48 -04:00
Chris Ross 287ecd3f0a Merge pull request #452 from n00py/2.0_beta 
VNC Inject
 2017-04-09 16:08:41 -04:00
ThePirateWhoSmellsOfSunflowers 51082a66fc Fix harcoded path, should resolv #465 2017-04-06 20:02:00 +02:00
Kevin 05dae225b6 Added a new module for SOCKSv5 proxying 
When executed, this module connects back to a designated AlmondRocks server under SSL. The AlmondRocks server acts as a SOCKSv5 proxy, and multiplexes all SOCKS communications over the single SSL connection to/through the target, enabling any SOCKSv5 client (e.g. curl, proxychains) to extend past NAT devices into the target network.

This is based on the following work:

https://github.com/klustic/AlmondRocks
** Server Usage **
$ ./almondrocks.py server -d -t 4433 --cert cert.pem --key key.pem

** Empire Usage **
set HOST 192.168.20.10
set PORT 4433
set Agent ...
 2017-04-05 10:24:31 -06:00
n00py b8f0bb2bbd Added module for enabling ARD 2017-02-10 08:38:46 -07:00
killswitch-gui dd6a8d4450 change imports 2017-02-08 11:55:57 -05:00
killswitch-gui beca8fa1a9 add in ability to set interface 2017-02-08 09:31:38 -05:00
killswitch-gui 0ff5a98dd9 add osx sniffer/fix sudospawn 2017-02-07 23:50:01 -05:00
Chris 4b79172d13 Removed unnecessary imports for Foundation and LaunchServices 2017-01-09 20:59:14 -05:00
Chris 3e7c2b9dea Removed Foundation import. Unnecessary. 2017-01-09 20:54:31 -05:00
Chris bfd9ee1413 Changed native_screenshot to be opsec safe. Added safe aliases for screenshot, ls, whoami 2017-01-07 22:15:20 -05:00