Commit Graph

438 Commits (13405e78d6bb090e52d1c50b0d44907dab07ba80)

Author SHA1 Message Date
Matt Nelson 0a4bd4b92c Merge pull request #166 from PowerShellEmpire/mimikatz_update
Update to mimikatz dlls
2016-03-31 17:10:25 -04:00
enigma0x3 30ef8172a0 Updated to hide process window for mimikatz pth 2016-03-31 16:52:36 -04:00
enigma0x3 c4a8a249fe Updated mimikatz version 2016-03-31 16:24:41 -04:00
Harmj0y ac5b002301 Updated changelog and version number for 1.5.0 release. 2016-03-31 16:06:02 -04:00
enigma0x3 e61d12b640 Updated mimikatz dlls 2016-03-31 15:35:28 -04:00
HarmJ0y dae17d1bc1 Merge pull request #165 from Kevin-Robertson/master
Inveigh 1.1 and Tater Modules
2016-03-31 11:13:53 -07:00
Harmj0y c6662d8a3a Added loading of external module directories with the 'load /DIR/' command in the main menu.
Solves issue #81.
2016-03-30 23:03:02 -04:00
Harmj0y 9e4e570a56 changed error responses to 400s 2016-03-30 21:58:00 -04:00
Harmj0y 739a45c8cd Added several POST /api/modules/search/* API calls to search modules
with a variety of methods.
2016-03-30 16:43:38 -04:00
Kevin Robertson 32b36c9597 Comment/Notes changes and WPADResponse removal
Updated additional comment/notes. I removed WPADResponse from inveigh
and inveigh_bruteforce since wpad.dat code contains commas. The python
code that is parsing the commas for the array parameters is getting in
that way. I can add WPADResponse back in later.
2016-03-30 15:35:44 -04:00
Kevin Robertson 987679bd9a Fixed missing single quote in description 2016-03-30 08:52:20 -04:00
Kevin Robertson 7a3a95f735 Sync features with updated versions of Inveigh and Tater
Upgrading collection/inveigh, lateral_movement/inveigh_relay, and
privesc/tater. Adding collection/inveigh_bruteforce.
2016-03-29 23:55:39 -04:00
Harmj0y 259390dbee fixed API tasking modules to 'all' agents 2016-03-26 21:13:51 -04:00
Harmj0y 68ca017105 Updated changelog 2016-03-26 00:20:32 -04:00
Harmj0y b3e8ebabe5 Expanded server/agent epoch check from +/- 10 minutes to +/- 12 hours 2016-03-26 00:00:40 -04:00
Harmj0y cd19fd4c66 Agged GET /api/creds to API 2016-03-25 23:49:16 -04:00
Harmj0y 5cb90f48e1 Changed agent tasking structure for API
POST /api/agents/<string:agent_name>/shell now tasks an agent to execute a shell command
POST /api/agents/<string:agent_name>/rename now renames an agent
GET/POST /api/agents/<string:agent_name>/clear now clears an agent task buffer
GET/POST /api/agents/<string:agent_name>/kill now kills an agent
DELETE /api/agents/<string:agent_name>/results now clears agent result buffer
2016-03-25 23:35:03 -04:00
Harmj0y c2ba61ca8d added -sta to stager launching 2016-03-25 19:45:09 -04:00
Harmj0y 16fbd88339 For stagers generated through the API, if 'OutFile' is set in the
passed arguments, the 'Output' field in stager data return will
contain the base64 encoded value of the generated stager data.
2016-03-24 22:24:01 -04:00
Harmj0y 72f252f1cd fix for GET /api/config 2016-03-24 20:15:19 -04:00
Harmj0y 40cbdd048f Modification of JSON output format for several API functions. 2016-03-24 18:21:35 -04:00
Harmj0y 2790f1226d Changed specific API results to 404s. 2016-03-24 17:05:08 -04:00
Harmj0y db64c1e987 Added /api/admin/restart to restart RESTful API and/or Empire instance. 2016-03-24 16:50:54 -04:00
Harmj0y b43da089ef Added POST /api/modules/<path:module_name> to task a module with specified options
Fix multi-stager generation bug
More exception handling in empire.py
2016-03-24 16:03:31 -04:00
Harmj0y 31eb9d387a Changed API path from /empire/api/ to /api/
Fixed agent renaming bug
2016-03-23 14:30:54 -04:00
Harmj0y f2ad5da09c Cleaned up agent tasking in API
/empire/api/agents/all/results now returns all agent results
2016-03-22 21:23:47 -04:00
Harmj0y 7c142151a8 'result' -> 'success' 2016-03-22 20:03:18 -04:00
Harmj0y 356f3ea74b Added /empire/api/agents/stale to the API to retrieve stale agents. 2016-03-22 19:46:35 -04:00
HarmJ0y 5b06e0d174 Merge pull request #160 from PowerShellEmpire/rest_login
Added /empire/api/admin/login to retrieve the current server token fo…
2016-03-22 16:33:40 -07:00
Harmj0y 894fe44700 Added /empire/api/admin/login to retrieve the current server token for auth
The api username defaults to 'empireadmin' and the password is randomly generated and stored in empire.db
The username/password can be modified with the ./empire --username X --password Y flags
2016-03-22 19:28:23 -04:00
HarmJ0y 446a004cc1 Merge pull request #157 from PowerShellEmpire/restful_api
RESTful API
2016-03-22 14:15:25 -07:00
Harmj0y f85fbf7079 Moved empire-rest to empire
Added new ./empire options: --rest to run just the RESTful API, --headless to run the RESTful API and a full Empire instance
Added /empire/api/admin/shutdown to API to shut the server down
Added proper shutdown functionality
Added hooks for CTRL+C to shut everything down gracefully
2016-03-22 17:06:18 -04:00
Harmj0y 2443312721 Added DELETE /empire/api/listeners/Y
Added DELETE /empire/api/agents/<string:agent_name>
Added DELETE /empire/api/agents/stale
Completed Clear and Rename commands in POST /empire/api/agents/<string:agent_name>
2016-03-22 15:33:45 -04:00
Harmj0y d67bbcce15 more small bug fixes 2016-03-22 14:37:10 -04:00
Harmj0y 2a13328c5b nav menu bug fix and standardization 2016-03-22 14:32:47 -04:00
Harmj0y ce307aa6db fix for issue #155 2016-03-22 01:51:23 -04:00
Harmj0y 502dc5c679 Added SSL and basic token auth to the RESTful API
Added random RESTful API token generation on server startup
2016-03-22 01:41:48 -04:00
Harmj0y ae9f046aba Added trollsploit/rick_astley to run @SadProcessor's audio rickroll 2016-03-21 23:11:12 -04:00
Harmj0y 9f1deb1d9e Added /empire/api/agents/<string:agent_name>/results to return agent tasking results and remove results from backend db 2016-03-21 22:56:02 -04:00
Harmj0y eaaea57253 Added /empire/api/listeners/kill to kill a listener specified by POST data
Added /empire/api/listeners/options to enumerate currently set listener options
Added start to docstrings in functions -> still need to describe complete request/response JSON formats
removed /empire/api/agents/ID/X
/empire/api/agents/name/Y -> /empire/api/agents/Y
removed /empire/api/listeners/id/X
/empire/api/listeners/name/Y -> /empire/api/listeners/Y
"X listeners currently active" now pulls from the backend DB
2016-03-21 21:50:19 -04:00
Harmj0y 334f1f4b5c Added POST to /empire/api/stagers in API to generate stagers
moved empire instantiation into the restful api start
2016-03-21 21:03:32 -04:00
Harmj0y 83cab0fae6 fixed headless termination 2016-03-21 20:28:05 -04:00
Harmj0y 6c335a36d6 Added empire-rest to launch the RESTful API 2016-03-21 20:21:25 -04:00
Harmj0y c15f445892 Revamp of some of the backend to allow for a proper RESTful API
Cleaned up some SQL calls
Moved tasking/results into database fields for agents, instead of being kept in memory on the client
Added --headless option to ./empire
2016-03-21 20:20:03 -04:00
Harmj0y e6e5222647 Added lateral_movement/new_gpo_immediate_task 2016-03-19 11:51:09 -04:00
Harmj0y 97335b83d6 -Added the ability to specify multiple function names to helpers.generate_dynamic_powershell_script()
-Added Unconstained option to get_computer
-Added AdminCount option to get_user
-Added situational_awareness/network/powerview/get_gpo_computer to get computers a GPO is applied to
2016-03-19 10:53:28 -04:00
Harmj0y d5db75c3d0 -Updated PowerView.ps1 code
-Re-tested all powerview modules
-Updated some module options
-Fixed bug in helpers.generate_dynamic_powershell_script()

-Added situational_awareness/network/powerview/get_domain_policy
-Added situational_awareness/network/powerview/get_dfs_share
-Added situational_awareness/network/powerview/get_fileserver
-Added situational_awareness/network/powerview/get_rdp_session
-Added situational_awareness/network/powerview/get_site
-Added situational_awareness/network/powerview/get_subnet
-Added situational_awareness/host/get_proxy
-Added situational_awareness/host/get_pathacl
-Added management/get_domain_sid
2016-03-19 08:38:18 -04:00
Harmj0y c5a0ebddb0 Added contribution and issue templates. 2016-03-19 06:52:59 -04:00
Harmj0y 45d219e1f5 bug fix for Invoke-PsExec and some x64 pointers 2016-03-11 20:33:46 -05:00
Harmj0y 2382bd0dea Added privesc/getsystem 2016-03-11 19:31:27 -05:00