44 Commits

Author SHA1 Message Date
Ne0nd0g 70af8223ca Fixed Invoke-Mimikatz module 2022-01-28 08:51:54 -05:00
Ne0nd0g 2d28cbc248 Fixed #107 - Updated modules.RunModule to use run command 2021-05-29 16:55:32 -04:00
Ne0nd0g c68a308625 Updated go-donut package to use .NET auto detect 2020-12-31 15:07:04 -05:00
Ne0nd0g a83740ad89 Added SharpGen functionality 2020-12-12 17:43:21 -05:00
Ne0nd0g d7c47635fd Merge branch 'dev' into SharpGen 2020-12-12 10:50:16 -05:00
Ne0nd0g 1887cd00a0 Added go-donut functionality 2020-12-12 09:21:15 -05:00
Ne0nd0g 261496d50c Added CreateProcess with redirected STDOUT/STDERR over anonymous pipes 2020-11-25 08:56:15 -05:00
Ne0nd0g c5b32f9ff3 Base SharpGen module added 2020-11-20 07:58:40 -05:00
Ne0nd0g d5e3eb2969 Added 4 modules from the D(COM) V(ulnerability) S(canner) Framework 2020-08-26 16:29:37 -04:00
Ne0nd0g 8823f1319e Updated SharpUp module to isolate variables 2020-06-05 08:35:51 -04:00
Ne0nd0g 54d86aac57 Closes #71 allowing modules to run across all agents when the platform matches. Added unset command to modules 2020-05-03 13:19:25 -04:00
Ne0nd0g 853c9ea4c8 Resolves #47 2020-02-26 07:35:42 -05:00
Ne0nd0g 900731606d Fixed #69 2019-04-21 20:58:40 -04:00
Ne0nd0g ced970677c Removed MinidumpFile struct and replaced with map to preclude the need
for the agent to import the modules package. Added minidump package
inside of modules. Updated minidump.json file.
2019-03-05 08:30:00 -05:00
Ne0nd0g 285c3ceeea Updated shellcode module and added shellcodeinjection.json module file 2019-03-04 21:51:31 -05:00
Ne0nd0g 298a52bf6f Added sRDI module. Added GetAgentFieldValue and isAgent functions to
agents.go. Updated cli.go to process module run command based on module
type (i.e. standard or extended) instead of language. Updated Module
struct to include a Type. Added a check to make sure the Module's
platform and Agent's platform match. Added a getExtendedCommand
function and handling to modules.go. Added getMapFromOptions to
modules.go to convert an Options struct to a map.
2019-03-01 22:03:32 -05:00
Ne0nd0g 668227103c Fixed module JSON to use correct values to get rid of arguments
prepended with a space. Cleaned up agent module processing code.
2019-02-23 21:46:06 -05:00
Ne0nd0g c706ad18bc Updated module info for more clarity and follow on steps. 2019-02-23 20:22:47 -05:00
c_sto 1faf795ab8 add ability to specify temp location 2019-02-16 18:48:31 +08:00
Ne0nd0g 36e38df867 Moved minidump module into credentials directory and added module file
path.
2019-02-09 11:30:11 -05:00
c_sto df5f318f88 move to module, add stub to non-windows exec, add ability to specify process, read data before parsing as json on server 2019-02-03 12:29:30 +08:00
Ne0nd0g 804b70796d Updated Grouper module to use tool creator's correct Twitter handle. 2018-08-26 06:30:26 -04:00
Ne0nd0g b4b8de4918 Updated SafetyKatz module to account for new Constants.cs 2018-08-23 19:17:55 -04:00
Ne0nd0g ee536f5b08 Updated Inveigh to include author's Twitter handle 2018-08-11 20:32:41 -04:00
Ne0nd0g 6bb30bb3c3 Added SafetyKatz, SharpDump, SharpRoast, Seatbelt, SharpUp, and Inveigh
modules. Added MerlinCheatSheet.pdf to docs directory. Updated Makefile
to extract version number from pkg/merlin.go
2018-08-11 16:25:01 -04:00
Ne0nd0g ea8e105006 Added Invoke-PowerThIEF and Get-ScheduledTaskComHandler modules 2018-07-17 20:55:57 -04:00
Ne0nd0g 6e44804101 Added 4 modules from @HarmJ0y's Discretionary ACL Modification Project
(DAMP)
2018-06-13 20:45:20 -04:00
Ne0nd0g d76caede60 Added Invoke-WMILM module 2018-05-28 13:50:58 -04:00
Ne0nd0g b3a2783918 Added Get-OSTokenInformation module 2018-05-26 14:39:25 -04:00
Ne0nd0g 9d7f172690 Added Create-HotKeyLNK persistence module 2018-05-26 14:39:25 -04:00
Ne0nd0g 16fc98cbcf Added DSCompromised Configure-Victim module 2018-05-26 14:39:25 -04:00
Ne0nd0g 506d130c99 Added Invoke-InternalMonologue module 2018-03-21 22:49:59 -04:00
Ne0nd0g 202c6a185d Updated module JSON structure to include Credits. Updated modules.go to
show credits. Added new exported Run function to the Agent DLL. Run
function takes URL as an argument.
2018-03-21 22:24:52 -04:00
Russel Van Tuyl d2fcd1214d Merge pull request #14 from ahhh/dev2
Added 2 modules:
- linux/x64/bash/credentials/MimiPenguin.json
- linux/x64/bash/troll/Prank.json
2018-03-11 20:32:43 -04:00
Dan Borges 44bf8a4dee Update Invoke-ADSBackdoor.json 2018-03-08 13:38:07 -08:00
dborges 186c04f21e Adding a few more modules, a bash and powershell 2018-03-08 13:29:29 -08:00
Ne0nd0g a2bd725fb6 Fixed SwapDigger and psgetsystem modules 2018-03-07 21:31:48 -05:00
Ne0nd0g 1fa30c1b5b Added psgetsystem module 2018-03-07 07:38:29 -05:00
Ne0nd0g 699925e32e Add support for dynamic list of modules. Added support for host os
command execution.
2018-02-25 15:57:38 -05:00
Ne0nd0g be7c743f94 Add support for module option variables and updated existing modules.
Created README to document how to write a module.
2018-02-24 08:39:58 -05:00
Ne0nd0g 1125687fc1 Added a detection and credentials PowerShell module 2018-02-13 10:40:02 -05:00
Ne0nd0g 1a71c9a8e2 Added 2 Lateral DCOM modules 2018-02-07 08:46:51 -05:00
Ne0nd0g 8be7665292 Fixed hardcoded module file paths. Don't judge me! 2018-02-06 20:21:45 -05:00
Ne0nd0g d01d50d020 First attempt at implementing modules. About 45% of the way there.
Module descriptors are JSON files in the data/modules directory.
2018-02-06 20:01:07 -05:00