Russel Van Tuyl
ed7d4eb3f4
wip: commands
2023-08-27 10:43:19 -04:00
Ne0nd0g
70af8223ca
Fixed Invoke-Mimikatz module
2022-01-28 08:51:54 -05:00
Ne0nd0g
2d28cbc248
Fixed #107 - Updated modules.RunModule to use run command
2021-05-29 16:55:32 -04:00
Ne0nd0g
63a5f97b85
Fixed shell arguments for Unix hosts
2021-04-18 08:15:40 -04:00
Ne0nd0g
c68a308625
Updated go-donut package to use .NET auto detect
2020-12-31 15:07:04 -05:00
Ne0nd0g
a83740ad89
Added SharpGen functionality
2020-12-12 17:43:21 -05:00
Ne0nd0g
d7c47635fd
Merge branch 'dev' into SharpGen
2020-12-12 10:50:16 -05:00
Ne0nd0g
1887cd00a0
Added go-donut functionality
2020-12-12 09:21:15 -05:00
Ne0nd0g
261496d50c
Added CreateProcess with redirected STDOUT/STDERR over anonymous pipes
2020-11-25 08:56:15 -05:00
Ne0nd0g
86ffcadac3
Added SharpGen submodule
2020-11-20 08:01:40 -05:00
Ne0nd0g
c5b32f9ff3
Base SharpGen module added
2020-11-20 07:58:40 -05:00
Ne0nd0g
7331d2d06e
Initial commit for Sphinx documentation generator and updated READMEs
2020-09-13 16:40:09 -04:00
Ne0nd0g
d5e3eb2969
Added 4 modules from the D(COM) V(ulnerability) S(canner) Framework
2020-08-26 16:29:37 -04:00
Ne0nd0g
bbe997bd68
Added regex to better fix #88 ;Updated modules README
2020-06-27 12:46:32 -04:00
Ne0nd0g
a6d41764f2
Reordered distro build steps & added missing readme
2020-06-27 09:46:47 -04:00
Ne0nd0g
3af070823a
Added macOS SwiftBelt module
2020-06-05 13:04:19 -04:00
Ne0nd0g
8823f1319e
Updated SharpUp module to isolate variables
2020-06-05 08:35:51 -04:00
Ne0nd0g
3ee2b7180b
Added 4 macOS modules for enumeration and kerberos interactions
2020-05-23 10:27:24 -04:00
Ne0nd0g
54d86aac57
Closes #71 allowing modules to run across all agents when the platform matches. Added unset command to modules
2020-05-03 13:19:25 -04:00
Ne0nd0g
b5d57e1350
Closes #88 allowing module option values to contain spaces
2020-05-01 08:42:45 -04:00
Ne0nd0g
853c9ea4c8
Resolves #47
2020-02-26 07:35:42 -05:00
Ne0nd0g
beaed0c3f8
Added support for Agent to create and use a TLS client based on a provided JA3 hash. Updated Dockerfile.
2020-02-08 18:01:13 -05:00
Russel Van Tuyl
4bbb336f93
Merge branch 'dev' into evade-and-persist
2019-07-27 15:54:59 -04:00
Tony M Lambert
253978beb7
Delete systemdService.json
2019-05-04 17:11:48 -05:00
ForensicITGuy
da41aa6e78
Modified folder
2019-05-04 17:00:57 -05:00
ForensicITGuy
db127b43bc
Do it filelessly
2019-05-04 16:44:33 -05:00
ForensicITGuy
522c559a65
fix
2019-05-04 16:18:55 -05:00
ForensicITGuy
3a2909f883
Evasion and Persistence Linux Modules
2019-05-04 16:07:07 -05:00
ForensicITGuy
c1b282de79
systemd persistence and timestomping
2019-04-25 21:04:02 -05:00
Ne0nd0g
624528f083
Updated to include module options for increased flexibility.
2019-04-25 07:41:30 -04:00
ForensicITGuy
ab6e32ce79
made more silent
2019-04-23 21:28:02 -05:00
ForensicITGuy
ce6509c458
add standard type
2019-04-23 21:23:38 -05:00
ForensicITGuy
cead3b4eb6
Added libprocesshider
2019-04-23 20:44:58 -05:00
Ne0nd0g
900731606d
Fixed #69
2019-04-21 20:58:40 -04:00
Ne0nd0g
a68f7b3098
Fix header reference
2019-03-19 07:13:01 -04:00
Ne0nd0g
b6eab8c87e
Added exported functions Merlin & Magic to merlin.dll along with DllMain.
...
Moved everything from libmerlin.dll to merlin.dll
2019-03-18 20:11:20 -04:00
Ne0nd0g
5671cdfa7b
libmerlin and DllMain work with Makefile
2019-03-06 06:23:13 -05:00
Ne0nd0g
ced970677c
Removed MinidumpFile struct and replaced with map to preclude the need
...
for the agent to import the modules package. Added minidump package
inside of modules. Updated minidump.json file.
2019-03-05 08:30:00 -05:00
Ne0nd0g
285c3ceeea
Updated shellcode module and added shellcodeinjection.json module file
2019-03-04 21:51:31 -05:00
Ne0nd0g
298a52bf6f
Added sRDI module. Added GetAgentFieldValue and isAgent functions to
...
agents.go. Updated cli.go to process module run command based on module
type (i.e. standard or extended) instead of language. Updated Module
struct to include a Type. Added a check to make sure the Module's
platform and Agent's platform match. Added a getExtendedCommand
function and handling to modules.go. Added getMapFromOptions to
modules.go to convert an Options struct to a map.
2019-03-01 22:03:32 -05:00
Ne0nd0g
668227103c
Fixed module JSON to use correct values to get rid of arguments
...
prepended with a space. Cleaned up agent module processing code.
2019-02-23 21:46:06 -05:00
Ne0nd0g
c706ad18bc
Updated module info for more clarity and follow on steps.
2019-02-23 20:22:47 -05:00
c_sto
48d623b7d9
merge upstream
2019-02-19 07:33:09 +08:00
c_sto
1faf795ab8
add ability to specify temp location
2019-02-16 18:48:31 +08:00
Ne0nd0g
36e38df867
Moved minidump module into credentials directory and added module file
...
path.
2019-02-09 11:30:11 -05:00
c_sto
23029814b2
add self generating TLS certificates in default no-cert state
2019-02-09 15:27:11 +08:00
c_sto
df5f318f88
move to module, add stub to non-windows exec, add ability to specify process, read data before parsing as json on server
2019-02-03 12:29:30 +08:00
Russel Van Tuyl
6dd5c019fd
Merge pull request #45 from klustic/dev
...
Added a module for Python-based SOCKS proxying
2019-01-22 20:05:52 -05:00
Ne0nd0g
ba35a79847
Adding x.509 certs
2019-01-10 23:12:31 -05:00
Ne0nd0g
d5106ac919
Updated Copyright for 2019
2019-01-01 12:19:21 -05:00