Matt Nelson
0a4bd4b92c
Merge pull request #166 from PowerShellEmpire/mimikatz_update
...
Update to mimikatz dlls
2016-03-31 17:10:25 -04:00
enigma0x3
30ef8172a0
Updated to hide process window for mimikatz pth
2016-03-31 16:52:36 -04:00
enigma0x3
c4a8a249fe
Updated mimikatz version
2016-03-31 16:24:41 -04:00
Harmj0y
ac5b002301
Updated changelog and version number for 1.5.0 release.
2016-03-31 16:06:02 -04:00
enigma0x3
e61d12b640
Updated mimikatz dlls
2016-03-31 15:35:28 -04:00
HarmJ0y
dae17d1bc1
Merge pull request #165 from Kevin-Robertson/master
...
Inveigh 1.1 and Tater Modules
2016-03-31 11:13:53 -07:00
Harmj0y
c6662d8a3a
Added loading of external module directories with the 'load /DIR/' command in the main menu.
...
Solves issue #81 .
2016-03-30 23:03:02 -04:00
Harmj0y
9e4e570a56
changed error responses to 400s
2016-03-30 21:58:00 -04:00
Harmj0y
739a45c8cd
Added several POST /api/modules/search/* API calls to search modules
...
with a variety of methods.
2016-03-30 16:43:38 -04:00
Kevin Robertson
32b36c9597
Comment/Notes changes and WPADResponse removal
...
Updated additional comment/notes. I removed WPADResponse from inveigh
and inveigh_bruteforce since wpad.dat code contains commas. The python
code that is parsing the commas for the array parameters is getting in
that way. I can add WPADResponse back in later.
2016-03-30 15:35:44 -04:00
Kevin Robertson
987679bd9a
Fixed missing single quote in description
2016-03-30 08:52:20 -04:00
Kevin Robertson
7a3a95f735
Sync features with updated versions of Inveigh and Tater
...
Upgrading collection/inveigh, lateral_movement/inveigh_relay, and
privesc/tater. Adding collection/inveigh_bruteforce.
2016-03-29 23:55:39 -04:00
Harmj0y
259390dbee
fixed API tasking modules to 'all' agents
2016-03-26 21:13:51 -04:00
Harmj0y
68ca017105
Updated changelog
2016-03-26 00:20:32 -04:00
Harmj0y
b3e8ebabe5
Expanded server/agent epoch check from +/- 10 minutes to +/- 12 hours
2016-03-26 00:00:40 -04:00
Harmj0y
cd19fd4c66
Agged GET /api/creds to API
2016-03-25 23:49:16 -04:00
Harmj0y
5cb90f48e1
Changed agent tasking structure for API
...
POST /api/agents/<string:agent_name>/shell now tasks an agent to execute a shell command
POST /api/agents/<string:agent_name>/rename now renames an agent
GET/POST /api/agents/<string:agent_name>/clear now clears an agent task buffer
GET/POST /api/agents/<string:agent_name>/kill now kills an agent
DELETE /api/agents/<string:agent_name>/results now clears agent result buffer
2016-03-25 23:35:03 -04:00
Harmj0y
c2ba61ca8d
added -sta to stager launching
2016-03-25 19:45:09 -04:00
Harmj0y
16fbd88339
For stagers generated through the API, if 'OutFile' is set in the
...
passed arguments, the 'Output' field in stager data return will
contain the base64 encoded value of the generated stager data.
2016-03-24 22:24:01 -04:00
Harmj0y
72f252f1cd
fix for GET /api/config
2016-03-24 20:15:19 -04:00
Harmj0y
40cbdd048f
Modification of JSON output format for several API functions.
2016-03-24 18:21:35 -04:00
Harmj0y
2790f1226d
Changed specific API results to 404s.
2016-03-24 17:05:08 -04:00
Harmj0y
db64c1e987
Added /api/admin/restart to restart RESTful API and/or Empire instance.
2016-03-24 16:50:54 -04:00
Harmj0y
b43da089ef
Added POST /api/modules/<path:module_name> to task a module with specified options
...
Fix multi-stager generation bug
More exception handling in empire.py
2016-03-24 16:03:31 -04:00
Harmj0y
31eb9d387a
Changed API path from /empire/api/ to /api/
...
Fixed agent renaming bug
2016-03-23 14:30:54 -04:00
Harmj0y
f2ad5da09c
Cleaned up agent tasking in API
...
/empire/api/agents/all/results now returns all agent results
2016-03-22 21:23:47 -04:00
Harmj0y
7c142151a8
'result' -> 'success'
2016-03-22 20:03:18 -04:00
Harmj0y
356f3ea74b
Added /empire/api/agents/stale to the API to retrieve stale agents.
2016-03-22 19:46:35 -04:00
HarmJ0y
5b06e0d174
Merge pull request #160 from PowerShellEmpire/rest_login
...
Added /empire/api/admin/login to retrieve the current server token fo…
2016-03-22 16:33:40 -07:00
Harmj0y
894fe44700
Added /empire/api/admin/login to retrieve the current server token for auth
...
The api username defaults to 'empireadmin' and the password is randomly generated and stored in empire.db
The username/password can be modified with the ./empire --username X --password Y flags
2016-03-22 19:28:23 -04:00
HarmJ0y
446a004cc1
Merge pull request #157 from PowerShellEmpire/restful_api
...
RESTful API
2016-03-22 14:15:25 -07:00
Harmj0y
f85fbf7079
Moved empire-rest to empire
...
Added new ./empire options: --rest to run just the RESTful API, --headless to run the RESTful API and a full Empire instance
Added /empire/api/admin/shutdown to API to shut the server down
Added proper shutdown functionality
Added hooks for CTRL+C to shut everything down gracefully
2016-03-22 17:06:18 -04:00
Harmj0y
2443312721
Added DELETE /empire/api/listeners/Y
...
Added DELETE /empire/api/agents/<string:agent_name>
Added DELETE /empire/api/agents/stale
Completed Clear and Rename commands in POST /empire/api/agents/<string:agent_name>
2016-03-22 15:33:45 -04:00
Harmj0y
d67bbcce15
more small bug fixes
2016-03-22 14:37:10 -04:00
Harmj0y
2a13328c5b
nav menu bug fix and standardization
2016-03-22 14:32:47 -04:00
Harmj0y
ce307aa6db
fix for issue #155
2016-03-22 01:51:23 -04:00
Harmj0y
502dc5c679
Added SSL and basic token auth to the RESTful API
...
Added random RESTful API token generation on server startup
2016-03-22 01:41:48 -04:00
Harmj0y
ae9f046aba
Added trollsploit/rick_astley to run @SadProcessor's audio rickroll
2016-03-21 23:11:12 -04:00
Harmj0y
9f1deb1d9e
Added /empire/api/agents/<string:agent_name>/results to return agent tasking results and remove results from backend db
2016-03-21 22:56:02 -04:00
Harmj0y
eaaea57253
Added /empire/api/listeners/kill to kill a listener specified by POST data
...
Added /empire/api/listeners/options to enumerate currently set listener options
Added start to docstrings in functions -> still need to describe complete request/response JSON formats
removed /empire/api/agents/ID/X
/empire/api/agents/name/Y -> /empire/api/agents/Y
removed /empire/api/listeners/id/X
/empire/api/listeners/name/Y -> /empire/api/listeners/Y
"X listeners currently active" now pulls from the backend DB
2016-03-21 21:50:19 -04:00
Harmj0y
334f1f4b5c
Added POST to /empire/api/stagers in API to generate stagers
...
moved empire instantiation into the restful api start
2016-03-21 21:03:32 -04:00
Harmj0y
83cab0fae6
fixed headless termination
2016-03-21 20:28:05 -04:00
Harmj0y
6c335a36d6
Added empire-rest to launch the RESTful API
2016-03-21 20:21:25 -04:00
Harmj0y
c15f445892
Revamp of some of the backend to allow for a proper RESTful API
...
Cleaned up some SQL calls
Moved tasking/results into database fields for agents, instead of being kept in memory on the client
Added --headless option to ./empire
2016-03-21 20:20:03 -04:00
Harmj0y
e6e5222647
Added lateral_movement/new_gpo_immediate_task
2016-03-19 11:51:09 -04:00
Harmj0y
97335b83d6
-Added the ability to specify multiple function names to helpers.generate_dynamic_powershell_script()
...
-Added Unconstained option to get_computer
-Added AdminCount option to get_user
-Added situational_awareness/network/powerview/get_gpo_computer to get computers a GPO is applied to
2016-03-19 10:53:28 -04:00
Harmj0y
d5db75c3d0
-Updated PowerView.ps1 code
...
-Re-tested all powerview modules
-Updated some module options
-Fixed bug in helpers.generate_dynamic_powershell_script()
-Added situational_awareness/network/powerview/get_domain_policy
-Added situational_awareness/network/powerview/get_dfs_share
-Added situational_awareness/network/powerview/get_fileserver
-Added situational_awareness/network/powerview/get_rdp_session
-Added situational_awareness/network/powerview/get_site
-Added situational_awareness/network/powerview/get_subnet
-Added situational_awareness/host/get_proxy
-Added situational_awareness/host/get_pathacl
-Added management/get_domain_sid
2016-03-19 08:38:18 -04:00
Harmj0y
c5a0ebddb0
Added contribution and issue templates.
2016-03-19 06:52:59 -04:00
Harmj0y
45d219e1f5
bug fix for Invoke-PsExec and some x64 pointers
2016-03-11 20:33:46 -05:00
Harmj0y
2382bd0dea
Added privesc/getsystem
2016-03-11 19:31:27 -05:00