Commit Graph

308 Commits (1f58041d45cd15321ed8ac6de24d9235142cbbe4)

Author SHA1 Message Date
xorrior 8895e13a6c Merge branch 'dev' into kerberoast-fix
Conflicts:
	.circleci/config.yml
	changelog
	empire
	lib/common/stagers.py
2018-01-02 15:42:08 -05:00
xorrior 192630dedd Minor changes for the install_path. My bad 2017-12-29 15:31:15 -05:00
xorrior 1887889920 Updated kerberoast source to match powersploit dev branch 2017-12-29 14:55:25 -05:00
xorrior 4162d54f6f Fix for #858 2017-12-29 12:52:24 -05:00
Gabriel Ryan 8c4f7c613e http Listener now evades Nessus plugin 99592
The http Listener now evades Nessus plugin 99592, which uses signature-based methods to identify Empire http Listeners. The following enhancements were added to the http Listener in order to accomplish this:

 - The http Listener behaves more like a “real” web server (making its signature more generic)
 - Hardcoded text specific to Werkzeug and Empire has been replaced by generic content
 - The Content-Length for default and error pages is now randomly set on startup
2017-12-28 00:46:34 -06:00
Dakota Nelson 5869f0144d update dropbox stager to use template engine 2017-12-14 16:04:49 +00:00
Dakota Nelson abbf05eb1c extract sysinfo from python http stager 2017-12-14 15:14:13 +00:00
Dakota Nelson 3122d96cce Removed shared code from python http stager, now uses jinja includes 2017-12-14 14:33:54 +00:00
Dakota Nelson 855408bb75 Add templating engine, convert HTTP python stager to use jinja template. Also:
- deprecate strip_python_comments
	- add jinja2 dependency in install.sh
2017-12-14 13:52:17 +00:00
xorrior 77f50f9778 Merge branch 'dev' of https://github.com/EmpireProject/Empire into dev 2017-12-06 21:53:03 -05:00
xorrior 734a04e47c Added keyboard python module source 2017-12-06 21:52:39 -05:00
Chris Ross b311399743
Merge pull request #836 from leoloobeek/dev
Add custom HTTP headers to ie_com listener
2017-12-05 17:46:35 -05:00
xorrior 8862a8328b Fix #827 2017-12-05 02:47:46 -05:00
xorrior 3558acba42 Swapped native_screenshot module. Now uses python-mss and drops image to disk 2017-11-29 14:10:14 -05:00
xorrior d615e99352 Swapped native_screenshot module. Now uses python-mss and drops image to disk 2017-11-29 14:08:12 -05:00
xorrior b8cda099ce Fixed pythonscript command in python agent
Conflicts:
	lib/common/empire.py
2017-11-26 22:48:20 -05:00
xorrior 8627462394 Fixed pythonscript command in python agent 2017-11-26 22:42:01 -05:00
Leo Loobeek 6e33630764 Added code to the http_com stager for custom HTTP headers 2017-11-26 20:44:13 -06:00
xorrior c13ae0dee5 Updated powerview.ps1 and corresponding modules 2017-11-14 11:18:59 -05:00
xorrior 96a689cfa7 Updated mimikatz to 2.1.1 20171106 2017-11-12 20:16:33 -05:00
xorrior 47f09ed045 Merge branch 'dev' of https://github.com/EmpireProject/Empire into dev 2017-11-12 17:36:28 -05:00
rvrsh3ll a5bbc78b9c Update Invoke-DCOM 2017-11-12 16:01:52 -05:00
rvrsh3ll 6f239d4fc8 Added Kevin Robertson's Invoke-SMBExec.ps1 2017-11-12 15:45:40 -05:00
Chris Ross 41bfb6cb07
Merge pull request #809 from lsfxz/master
Make compatible with more recent pyopenssl
2017-11-09 13:55:36 -05:00
xorrior 241bf8c9ad Merge branch 'dev' of https://github.com/malcomvetter/Empire into dev 2017-11-09 00:04:09 -05:00
ThePirateWhoSmellsOfSunflowers d41c7da190 Fix the padding and a logic bug in aes implementation, should fix #586 2017-10-27 17:10:15 +02:00
xorrior cfdc5d5556 Patch b64decode padding error 2017-10-27 03:47:06 -04:00
evs-ch c1da4a060f allow new pyOpenSSL, somewhat "better" fix for #697 2017-10-25 10:18:17 +02:00
xorrior 4106db3279 Fixed renegotation loop in stager 2017-10-24 02:45:41 -04:00
Chris Ross fb8778a103 Merge branch 'dev' into ntsd 2017-10-20 01:46:45 -04:00
malcomvetter 6f866d023c MacOS sandbox fixes 2017-10-19 17:25:24 -05:00
root a645d461ef changes to the invoke_ntsd module 2017-10-19 11:10:39 -04:00
Chris Ross 1467debe61 Merge pull request #698 from addenial/dev
Invoke-PowerDump bug - corrupt hash fix
2017-10-18 02:09:54 -04:00
root 999970e96a pushing module for ntsd code exec 2017-10-16 10:23:41 -04:00
xorrior 76c7d1bd1b Fix for #729 2017-10-15 13:51:35 -04:00
xorrior b971803658 Removed option to set chucksize. Added logic to set it agent side 2017-10-15 12:52:51 -04:00
xorrior 32990dfe11 Fix for #755 2017-10-14 18:11:00 -04:00
xorrior cb26ae4fd8 Finally fixing #369 2017-10-14 00:46:00 -04:00
xorrior 4aea7272f0 Merged with master 2017-10-12 12:15:44 -04:00
ThePirateWhoSmellsOfSunflowers da3cc8d8e2 Improve Get-ChromeDump 2017-10-02 14:45:42 +02:00
Steve Borosh 0eb5aa37dd Merge pull request #725 from elitest/AES-Kerberoast
Aes kerberoast
2017-09-30 20:32:22 -04:00
Steve Borosh 5e92df645c Merge pull request #722 from hightopfade/dev
generate_upload function added to Stagers
2017-09-30 17:05:23 -04:00
Steve Borosh 0f04dd9a0d Merge pull request #730 from clr2of8/dev
Hide true host name when using domain fronting
2017-09-30 11:27:11 -04:00
Carrie Roberts d73c4a1d20 Request Root URL from agent when domain fronting 2017-09-29 15:48:45 -06:00
Jim Shaver 7b4e202bab Added in changes from 0ffca14 2017-09-26 17:44:45 -07:00
Jim Shaver 77741b83aa Fix spacing 2017-09-26 16:11:40 -07:00
Jim Shaver 25be0c1e48 Add support for AES Kerberoasting 2017-09-26 16:06:23 -07:00
rvrsh3ll b720b7996e Add stager option and bypass uac module 2017-09-26 10:13:21 -04:00
root 930bc09be2 added generate upload function and example code 2017-09-25 10:10:10 -04:00
xorrior 3d7a07a114 Fixed killdate for both agents. Fixed working hours for python agent 2017-09-23 10:28:51 -04:00