Commit Graph

499 Commits (68935276ffe1918a43f21fad367b21579230e166)

Author SHA1 Message Date
rschoem 68935276ff Create scrambled_macro.py
Stager based on the normal macro stager. Adds "noise" to the payload to help evading signature based AV solutions
2016-08-19 23:22:14 +02:00
Matt Nelson e4aff013d5 Update changelog 2016-08-15 18:01:19 -04:00
enigma0x3 eefc493411 Added fileless UAC bypass using eventvwr.exe 2016-08-15 17:55:57 -04:00
Matt Nelson f786441364 Update changelog 2016-08-13 21:28:48 -04:00
Matt Nelson b7010b7f37 Merge pull request #164 from 0xbadjuju/master
Resubmitting pull request for normal module
2016-08-13 21:28:00 -04:00
HarmJ0y fa2700b9b9 fix for issue #300 2016-08-11 17:01:10 -04:00
Matt Nelson 2523f84f0f Fixed bug with fqdn
Thanks to @curi0usJack for reporting this.
2016-08-06 23:10:01 -07:00
Matt Nelson 3332f4aa98 Merge pull request #286 from xorrior/dev
Renamed module. Merged embedded assemblies. Fixed issue with module. Fixes issue https://github.com/PowerShellEmpire/Empire/issues/217
2016-07-24 20:46:16 -04:00
chris e4aad33146 Renamed module. Merged embedded assemblies. Fixed issue with module execution 2016-07-24 20:16:55 -04:00
Harmj0y bec33f73ac moved collection/keethief to collection/vaults/keethief
added collection/vaults/find_keepass_config to enumerate KeePass configs on a system
added collection/vaults/add_keepass_config_trigger to add a trigger backdoor to all reachable KeePass instances
added collection/vaults/get_keepass_config_trigger to enumerate all triggers for all reachable KeePass instances
added collection/vaults/remove_keepass_config_trigger to remove all triggers for all reachable KeePass instances
misc. bug fixes
2016-07-20 23:44:30 -04:00
Harmj0y 7790b250a2 misc. bug fixes and standardization updates 2016-07-20 23:39:25 -04:00
Harmj0y 0163ebec06 Added missing Invoke-CredentialInjection.ps1 file
Updated .gitignore
2016-07-20 21:51:14 -04:00
Harmj0y fe43560bad Fix for issue #285 - credential export supporting commas
Start of code standardization/pep8 cleanup - mods to agents.py, empire.py, and credentials.py
Updated changelog
2016-07-20 21:28:27 -04:00
Harmj0y 2e8a7fba94 Merge branch 'dev' of github.com:PowerShellEmpire/Empire into dev 2016-07-20 19:24:23 -04:00
Harmj0y 7167f22500 added system name to screenshot output for issue #273
start of code pep8/pylint standardization - various cleaning
2016-07-20 19:06:42 -04:00
Matt Nelson e83b545476 Merge pull request #277 from BeetleChunks/master
Adding credentials module to extract the current interactive user's Credential Manager credentials.
2016-07-16 22:06:04 -04:00
Harmj0y ece3a3b540 fix for issue #248 2016-07-16 21:54:18 -04:00
Harmj0y 7d697cb4b7 Expanded 'creds X' query to search domain and password as well, wildcards (*) accepted 2016-07-16 21:27:35 -04:00
Harmj0y 39d174235a Added module collection/keethief 2016-07-16 19:58:08 -04:00
Harmj0y 21893bacde Fix for issue #257 - sysinfo now tasked after steal_token/revtoself 2016-07-15 19:14:43 -04:00
Harmj0y c9bae2fc4c Fix for issue #252 2016-07-15 19:00:49 -04:00
Harmj0y c38256ab5c Semi-global interact command for issue #258 2016-07-15 18:56:38 -04:00
Harmj0y 75f3e2c410 Merge branch 'dev' of https://github.com/PowerShellEmpire/Empire into dev 2016-07-15 18:06:49 -04:00
Harmj0y 7c5a07581d Fix for issue #221 2016-07-15 18:06:20 -04:00
HarmJ0y 8028963b64 Merge pull request #274 from curi0usJack/dev
Adding SMB auto-brute module
2016-07-15 14:51:25 -07:00
HarmJ0y fa53917c2c Merge pull request #269 from jaredhaight/add-pip-to-setup
adding python-pip to unknown deb and moved apt-get commands to one line
2016-07-15 14:47:39 -07:00
HarmJ0y 74b796d82a Merge pull request #280 from goldenbr0wn/patch-3
Add OpenSSL to Ubuntu
2016-07-15 14:45:37 -07:00
HarmJ0y 2b1b407baa Merge pull request #275 from rvrsh3ll/dev
Add Browser Search Module
2016-07-15 14:43:28 -07:00
goldenbr0wn c6f85882e2 Add OpenSSL to Ubuntu 2016-07-11 00:45:56 +02:00
BeetleChunks 5094c10a42 Add files via upload 2016-07-08 08:59:44 -05:00
BeetleChunks 7ad52105ee Add files via upload 2016-07-08 08:59:13 -05:00
@424f424f 05302321ac Add Browser Search Module 2016-07-07 22:46:41 -04:00
curi0usJack 97aa252cad Added smbautobrute.py 2016-07-07 16:31:34 -05:00
curi0usJack 2ebf5832c8 Added Invoke-SMBAutoBrute.ps1 2016-07-07 16:30:14 -05:00
Jared Haight 4965e19d3f adding python-pip to unknown deb and moved apt-get commands to one line 2016-06-30 20:30:09 -04:00
Matt Nelson 576de97817 Update changelog 2016-06-24 22:55:04 -04:00
Matt Nelson 91f01e239e Update changelog 2016-06-24 22:54:52 -04:00
enigma0x3 8666d5f5f8 included fix by @i223t for 417 Expectation failed error when going through older Squid proxies 2016-06-24 22:51:46 -04:00
Matt Nelson e07e7ca539 Merge pull request #263 from PowerShellEmpire/revert-55-expect100continue_fix
Revert "417 Expectation failed error fix"
2016-06-24 22:42:21 -04:00
Matt Nelson 40e1639889 Revert "417 Expectation failed error fix" 2016-06-24 22:42:13 -04:00
Matt Nelson 40519e76ea Merge pull request #55 from i223t/expect100continue_fix
417 Expectation failed error fix
2016-06-24 22:42:07 -04:00
Matt Nelson 37cd95838f Update changelog 2016-06-24 22:22:12 -04:00
Matt Nelson c917cfc3d3 Merge pull request #234 from chrislambda/Empire-dev
Cast port from string to int when starting REST service
2016-06-24 22:18:35 -04:00
Matt Nelson 039934b883 Merge pull request #235 from Kevin-Robertson/master
Sync with Inveigh 1.1.1 and current Tater
2016-06-24 22:15:37 -04:00
Matt Nelson 2a23255460 Fixed typo thanks to @jrmdev
Typo prevented the module from working. Implemented fix submitted here: https://github.com/PowerShellEmpire/Empire/pull/262 by @jrmdev.
2016-06-24 21:33:12 -04:00
Matt Nelson 7e7e4e2e23 Update changelog 2016-06-24 21:26:45 -04:00
Matt Nelson fae79cef1d Merge pull request #247 from n0clues/master
Change paths from %TEMP% to %PUBLIC% for spawnas module
2016-06-24 21:24:48 -04:00
Matt Nelson 2e30da7a42 Update changelog 2016-06-24 21:06:24 -04:00
enigma0x3 9698b75398 Updated Invoke-Mimikatz dlls after updating Invoke-Mimikatz from PowerSploit 2016-06-24 20:59:30 -04:00
enigma0x3 1a266ce6a0 Updated Invoke-Mimikatz with version from 'master' in PowerSploit. Fixed processor arch detection bug 2016-06-24 20:27:00 -04:00