de03f902ec
Repaired function definition for generate()
2017-09-21 22:59:08 -04:00
14efafd5a1
Update Crontab.py
...
Updated the crontab persistence so that the Hour option sets the Hour rather than the minute option. This make the crontab execute every 24 hours rather than ever x minutes.
2017-08-30 14:59:50 -04:00
332b78d07c
Fix shebangs
...
Move shebangs to /usr/bin/env foo
2017-08-16 01:41:22 -04:00
8c834a9e5b
Changed Needs admin to true
2017-08-15 10:48:07 -04:00
28fa1905ff
Create dyld_print_to_file.py
...
Empire module for exploitation of Mac OSX's CVE-2015-3760 (DYLD_PRINT_TO_FILE) exploit.
2017-08-06 13:04:21 -04:00
517508d0d6
Add mimipenguin
2017-07-31 17:34:56 -04:00
7074616113
Added 'SandboxMode' option to evade Apple Sandbox protections on applescript
2017-06-13 23:34:50 -06:00
a5b9f44cad
Moved socks module
2017-04-20 21:21:39 -04:00
042f24ab3b
Merge pull request #478 from klustic/2.0_beta
...
Added a module for SOCKSv5 proxying
2017-04-20 21:17:48 -04:00
287ecd3f0a
Merge pull request #452 from n00py/2.0_beta
...
VNC Inject
2017-04-09 16:08:41 -04:00
51082a66fc
Fix harcoded path, should resolv #465
2017-04-06 20:02:00 +02:00
05dae225b6
Added a new module for SOCKSv5 proxying
...
When executed, this module connects back to a designated AlmondRocks server under SSL. The AlmondRocks server acts as a SOCKSv5 proxy, and multiplexes all SOCKS communications over the single SSL connection to/through the target, enabling any SOCKSv5 client (e.g. curl, proxychains) to extend past NAT devices into the target network.
This is based on the following work:
https://github.com/klustic/AlmondRocks
** Server Usage **
$ ./almondrocks.py server -d -t 4433 --cert cert.pem --key key.pem
** Empire Usage **
set HOST 192.168.20.10
set PORT 4433
set Agent ...
2017-04-05 10:24:31 -06:00
b8f0bb2bbd
Added module for enabling ARD
2017-02-10 08:38:46 -07:00
dd6a8d4450
change imports
2017-02-08 11:55:57 -05:00
beca8fa1a9
add in ability to set interface
2017-02-08 09:31:38 -05:00
0ff5a98dd9
add osx sniffer/fix sudospawn
2017-02-07 23:50:01 -05:00
4b79172d13
Removed unnecessary imports for Foundation and LaunchServices
2017-01-09 20:59:14 -05:00
3e7c2b9dea
Removed Foundation import. Unnecessary.
2017-01-09 20:54:31 -05:00
bfd9ee1413
Changed native_screenshot to be opsec safe. Added safe aliases for screenshot, ls, whoami
2017-01-07 22:15:20 -05:00
e5bf468158
Fix for issue #382 . Fixed downloads in python agent. updated install script to include zlib_wrapper module.
2017-01-04 22:39:37 -05:00
2d96a72460
Swapped native_screenshot with screenshot source. Modules were named improperly
2016-12-10 22:48:13 -05:00
d2179b7042
removed some dcos modules, recommended to now use the http rest api module
2016-11-20 18:23:30 +00:00
e1fa30c14f
added etcd crawler module
2016-11-20 18:11:55 +00:00
a52b680445
added http rest api module
2016-11-20 18:04:31 +00:00
26c8839edf
Update bashdoor.py
...
Removed iTunes subdirectory
2016-10-11 09:40:54 -07:00
3f39272711
new module bashdoor
2016-10-10 13:53:48 -07:00
f7dd1c11e3
removed default trigger
2016-10-08 12:51:46 -07:00
5ac6b9cf00
modified mail
2016-10-08 12:47:03 -07:00
1ae3fb906c
Merge remote-tracking branch 'origin/2.0_beta' into 2.0_beta
...
# Conflicts:
# lib/modules/python/persistence/osx/mail.py
2016-10-08 12:46:25 -07:00
17e97360ff
new modules
2016-10-08 12:45:44 -07:00
2c5d7f5373
Delete mail.py
2016-10-08 11:19:51 -07:00
06d580e69a
new modules
2016-10-07 22:04:58 -07:00
236d303da3
new modules
2016-10-07 20:52:42 -07:00
c23ceac128
new modules
2016-10-07 20:38:27 -07:00
16d0df5f04
new modules
2016-10-07 20:38:07 -07:00
e93ef08055
Updated Dylib templates. Removed hijacker generation from dylib stager menu. Added additional error checking to the HijackScanner module
2016-10-05 12:40:29 -04:00
26cd0089dd
2.0.0 beta, DerbyCon release
2016-09-23 14:04:35 -04:00
xorrior