Commit Graph

1620 Commits (2c54e3857a5f56041a8932983bb16a660eefdd61)

Author SHA1 Message Date
HarmJ0y 8aa7918ef6 Merge pull request #95 from PowerShellEmpire/nested_menu_fix2
Fixed nested menu bug that caused buildup of "Agent X not active."
2015-11-21 20:16:12 -05:00
Harmj0y 8637a49338 Fixed nested menu bug that caused buildup of "Agent X not active."
Main display menu now shows each time "main" menu is entered.
2015-11-21 20:03:40 -05:00
Harmj0y 062a806dd6 Certificate generation added to setup.sh 2015-11-21 18:24:17 -05:00
HarmJ0y 9f1cb47d3a Merge pull request #89 from MikeDawg/master
Updated install.sh to support Fedora
2015-11-21 18:16:39 -05:00
HarmJ0y 6481b7a47d Merge pull request #91 from sethsec/master
Made SSL key/cert generation non-interactive
2015-11-21 18:10:22 -05:00
Harmj0y 2c14853b29 Fix for exploitation/exploit_jboss 2015-11-21 18:07:57 -05:00
HarmJ0y b31d69745e Merge pull request #94 from rvrsh3ll/master
Added JBoss JMX Console exploit deployment module.
2015-11-21 17:56:29 -05:00
rvrsh3ll b8d34090fe Added JBoss JMX Console exploit deployment module. 2015-11-20 12:37:19 -05:00
sethsec 062f98d0d1 Made SSL key/cert generation non-interactive 2015-11-18 23:49:33 -05:00
MikeDawg a1abe22016 Updated install.sh to support Fedora
Added support for Fedora, cleaned up the options for Debian and Kali. Fallback is going to Ubuntu/Debian
2015-11-13 16:01:41 -07:00
Harmj0y 8961af6262 Added situational_awareness/network/powerview/get_loggedon and get_session 2015-11-12 23:17:37 -05:00
Harmj0y 6058f25a57 few tweaks to recon/find_fruit 2015-11-08 20:40:07 -05:00
HarmJ0y c68177cff7 Merge pull request #87 from rvrsh3ll/master
Threading Updates
2015-11-08 20:37:41 -05:00
rvrsh3ll fbd0b3434e Added ColdFusion 2015-11-08 20:08:46 -05:00
Harmj0y c9afcc138f Updated PowerView, added situational_awareness/network/powerview/get_forest 2015-11-08 19:36:20 -05:00
Harmj0y 7252718537 derp 2015-11-08 19:00:03 -05:00
Harmj0y 7db7ec6bbc All PowerUp modules now dynamically built from a single source file
PowerUp bug fixes
Added privesc/powerup/service_exe_restore, pulled logic from other modules
Added management/spawnas to spawn agents with explicit credentials
Debug functionality (--debug) now outputs the source of the last tasked script to ./LastTask.ps1
Write-Verbose and Write-Debug lines now stripped from tasked scripts
2015-11-08 18:51:57 -05:00
rvrsh3ll 746f390a1d Added Threading
Added FoundOnly
2015-11-08 08:10:32 -05:00
Harmj0y 3315c106ba Renamed privesc/directuac to privesc/ask
Added local admin priv and opsec checks
2015-11-05 13:06:36 -05:00
HarmJ0y c16107ca7b Merge pull request #84 from Jack64/patch-2
Privesc - DirectUAC
2015-11-05 12:48:21 -05:00
João Pena Gil 6adfacf8f6 Privesc - DirectUAC
Added DirectUAC module.

Description:

Leverages Start-Process' -Verb runAs option inside a loop to prompt the user for a high integrity context before running the agent code.
UAC will report Powershell is requesting Administrator privileges. Because this does not use the BypassUAC DLLs, it should not trigger any AV alerts.
2015-11-05 09:53:34 +00:00
Harmj0y 4e95039bc4 added persistence/misc/add_netuser to add local/domain users 2015-11-04 15:19:06 -05:00
Harmj0y ced2b5d373 Merge branch 'master' of https://github.com/PowerShellEmpire/Empire 2015-11-02 14:53:06 -05:00
Harmj0y 55709598d5 Bug fix in some packet responses. 2015-11-02 14:52:46 -05:00
HarmJ0y 04f6869f1e Merge pull request #79 from tguglanaklona/BypassUAC-SID-Add
Specifying Mandatory Level SID at Invoke-BypassUAC
2015-11-01 18:28:32 -05:00
tguglanaklona 4908aca8c5 Specifying Mandatory Level Name instead of SID can lead to false-negative result (for non-latin names, as for me - cyrillic). Changed to SID 2015-11-01 23:55:08 +03:00
enigma0x3 35fe5be817 Merge pull request #78 from redfast00/master
Corrected a typo preventing the autorunning macro from automatically running
2015-10-30 16:51:59 -04:00
redfast00 545d947183 Corrected a typo preventing the autorunning macro from automatically running 2015-10-30 21:44:58 +01:00
Harmj0y c26a63ad94 marked module option as not required 2015-10-30 13:51:59 -04:00
Harmj0y 581c9aa948 Moved antivirusproduct to situational_awareness/host/antivirusproduct ,
added ComputerName option, output pipeline fix.
2015-10-30 13:39:25 -04:00
HarmJ0y 59aa123d88 Merge pull request #77 from mh4x0f/master
added module collection/Get-AntiVirusProduct
2015-10-30 13:36:21 -04:00
Harmj0y 1bedcee211 Updated version number and changelog for 1.3.1 2015-10-30 12:08:57 -04:00
enigma0x3 123a2435a7 updated dlls to fix bug in injection and dll payload injection 2015-10-30 11:58:21 -04:00
Mharcos Nesster 95ef63fb74 added module collection/Get-AntiVirusProduct 2015-10-30 00:22:16 -02:00
HarmJ0y 8d49e44428 Merge pull request #74 from pasv/module_dev_paranoia
Invoke-Paranoia
2015-10-29 12:26:14 -04:00
pasv d6daa45646 Merge branch 'master' into module_dev_paranoia 2015-10-28 23:39:38 -04:00
Harmj0y e62c5866c0 Moved Find-Fruit.ps1 source to ./data/module_source/recon/*
Output tweak for find_fruit, added ShowAll flag
2015-10-28 13:52:35 -04:00
HarmJ0y 8ac51073e6 Merge pull request #69 from rvrsh3ll/master
Added find-fruit.py
2015-10-28 13:41:34 -04:00
Steve Borosh c948fcdbfb Parameter fixes 2015-10-27 17:43:01 -04:00
Harmj0y 26ce47782b changelog update 2015-10-27 15:20:41 -04:00
HarmJ0y e08625b919 Merge pull request #73 from PowerShellEmpire/powerview2.0_update
Powerview2.0 update
2015-10-27 15:19:15 -04:00
Harmj0y 5e28a08ff9 changelog for merge 2015-10-27 15:18:26 -04:00
Harmj0y 4ceafec807 add_sid_history Groups bug fix 2015-10-27 14:48:43 -04:00
Harmj0y cd0e50a7aa Error handling and recurse more than one level for PowerView >_< 2015-10-26 18:03:39 -04:00
Harmj0y b4af938188 Updated PowerView to 2.0.1 2015-10-26 15:29:37 -04:00
enigma0x3 90e0ea0444 Update changelog 2015-10-26 14:34:10 -04:00
enigma0x3 681481e0f4 Merge pull request #70 from PowerShellEmpire/psinject_fix
Added leechristensen's fix to support .Net 3 and 4. Fixes a bug with injection when .NET 4.0 isn't present.
2015-10-26 14:31:22 -04:00
enigma0x3 e82dffc654 Added leechristensen's fix to support .Net 3 and 4. Fixes a bug with injection on boxes without .NET 4.0 2015-10-26 14:19:44 -04:00
Steve Borosh 2855b3e045 Fix 2015-10-24 22:58:38 -04:00
Steve Borosh d66c511252 Added find-fruit.py 2015-10-24 22:09:35 -04:00