99 Commits

Author SHA1 Message Date
Russel Van Tuyl ed7d4eb3f4 wip: commands 2023-08-27 10:43:19 -04:00
Ne0nd0g 70af8223ca Fixed Invoke-Mimikatz module 2022-01-28 08:51:54 -05:00
Ne0nd0g 2d28cbc248 Fixed #107 - Updated modules.RunModule to use run command 2021-05-29 16:55:32 -04:00
Ne0nd0g 63a5f97b85 Fixed shell arguments for Unix hosts 2021-04-18 08:15:40 -04:00
Ne0nd0g c68a308625 Updated go-donut package to use .NET auto detect 2020-12-31 15:07:04 -05:00
Ne0nd0g a83740ad89 Added SharpGen functionality 2020-12-12 17:43:21 -05:00
Ne0nd0g d7c47635fd Merge branch 'dev' into SharpGen 2020-12-12 10:50:16 -05:00
Ne0nd0g 1887cd00a0 Added go-donut functionality 2020-12-12 09:21:15 -05:00
Ne0nd0g 261496d50c Added CreateProcess with redirected STDOUT/STDERR over anonymous pipes 2020-11-25 08:56:15 -05:00
Ne0nd0g 86ffcadac3 Added SharpGen submodule 2020-11-20 08:01:40 -05:00
Ne0nd0g c5b32f9ff3 Base SharpGen module added 2020-11-20 07:58:40 -05:00
Ne0nd0g 7331d2d06e Initial commit for Sphinx documentation generator and updated READMEs 2020-09-13 16:40:09 -04:00
Ne0nd0g d5e3eb2969 Added 4 modules from the D(COM) V(ulnerability) S(canner) Framework 2020-08-26 16:29:37 -04:00
Ne0nd0g bbe997bd68 Added regex to better fix #88 ;Updated modules README 2020-06-27 12:46:32 -04:00
Ne0nd0g a6d41764f2 Reordered distro build steps & added missing readme 2020-06-27 09:46:47 -04:00
Ne0nd0g 3af070823a Added macOS SwiftBelt module 2020-06-05 13:04:19 -04:00
Ne0nd0g 8823f1319e Updated SharpUp module to isolate variables 2020-06-05 08:35:51 -04:00
Ne0nd0g 3ee2b7180b Added 4 macOS modules for enumeration and kerberos interactions 2020-05-23 10:27:24 -04:00
Ne0nd0g 54d86aac57 Closes #71 allowing modules to run across all agents when the platform matches. Added unset command to modules 2020-05-03 13:19:25 -04:00
Ne0nd0g b5d57e1350 Closes #88 allowing module option values to contain spaces 2020-05-01 08:42:45 -04:00
Ne0nd0g 853c9ea4c8 Resolves #47 2020-02-26 07:35:42 -05:00
Ne0nd0g beaed0c3f8 Added support for Agent to create and use a TLS client based on a provided JA3 hash. Updated Dockerfile. 2020-02-08 18:01:13 -05:00
Russel Van Tuyl 4bbb336f93 Merge branch 'dev' into evade-and-persist 2019-07-27 15:54:59 -04:00
Tony M Lambert 253978beb7 Delete systemdService.json 2019-05-04 17:11:48 -05:00
ForensicITGuy da41aa6e78 Modified folder 2019-05-04 17:00:57 -05:00
ForensicITGuy db127b43bc Do it filelessly 2019-05-04 16:44:33 -05:00
ForensicITGuy 522c559a65 fix 2019-05-04 16:18:55 -05:00
ForensicITGuy 3a2909f883 Evasion and Persistence Linux Modules 2019-05-04 16:07:07 -05:00
ForensicITGuy c1b282de79 systemd persistence and timestomping 2019-04-25 21:04:02 -05:00
Ne0nd0g 624528f083 Updated to include module options for increased flexibility. 2019-04-25 07:41:30 -04:00
ForensicITGuy ab6e32ce79 made more silent 2019-04-23 21:28:02 -05:00
ForensicITGuy ce6509c458 add standard type 2019-04-23 21:23:38 -05:00
ForensicITGuy cead3b4eb6 Added libprocesshider 2019-04-23 20:44:58 -05:00
Ne0nd0g 900731606d Fixed #69 2019-04-21 20:58:40 -04:00
Ne0nd0g a68f7b3098 Fix header reference 2019-03-19 07:13:01 -04:00
Ne0nd0g b6eab8c87e Added exported functions Merlin & Magic to merlin.dll along with DllMain.
Moved everything from libmerlin.dll to merlin.dll
2019-03-18 20:11:20 -04:00
Ne0nd0g 5671cdfa7b libmerlin and DllMain work with Makefile 2019-03-06 06:23:13 -05:00
Ne0nd0g ced970677c Removed MinidumpFile struct and replaced with map to preclude the need
for the agent to import the modules package. Added minidump package
inside of modules. Updated minidump.json file.
2019-03-05 08:30:00 -05:00
Ne0nd0g 285c3ceeea Updated shellcode module and added shellcodeinjection.json module file 2019-03-04 21:51:31 -05:00
Ne0nd0g 298a52bf6f Added sRDI module. Added GetAgentFieldValue and isAgent functions to
agents.go. Updated cli.go to process module run command based on module
type (i.e. standard or extended) instead of language. Updated Module
struct to include a Type. Added a check to make sure the Module's
platform and Agent's platform match. Added a getExtendedCommand
function and handling to modules.go. Added getMapFromOptions to
modules.go to convert an Options struct to a map.
2019-03-01 22:03:32 -05:00
Ne0nd0g 668227103c Fixed module JSON to use correct values to get rid of arguments
prepended with a space. Cleaned up agent module processing code.
2019-02-23 21:46:06 -05:00
Ne0nd0g c706ad18bc Updated module info for more clarity and follow on steps. 2019-02-23 20:22:47 -05:00
c_sto 48d623b7d9 merge upstream 2019-02-19 07:33:09 +08:00
c_sto 1faf795ab8 add ability to specify temp location 2019-02-16 18:48:31 +08:00
Ne0nd0g 36e38df867 Moved minidump module into credentials directory and added module file
path.
2019-02-09 11:30:11 -05:00
c_sto 23029814b2 add self generating TLS certificates in default no-cert state 2019-02-09 15:27:11 +08:00
c_sto df5f318f88 move to module, add stub to non-windows exec, add ability to specify process, read data before parsing as json on server 2019-02-03 12:29:30 +08:00
Russel Van Tuyl 6dd5c019fd Merge pull request #45 from klustic/dev
Added a module for Python-based SOCKS proxying
2019-01-22 20:05:52 -05:00
Ne0nd0g ba35a79847 Adding x.509 certs 2019-01-10 23:12:31 -05:00
Ne0nd0g d5106ac919 Updated Copyright for 2019 2019-01-01 12:19:21 -05:00