Commit Graph

737 Commits (969de193f05f2c88eef56b9efbb004cdd3830f58)

Author SHA1 Message Date
xorrior 969de193f0 Added missing listenerOptions var, for #907 2018-01-07 04:18:09 -05:00
xorrior 8092bcef66 Patch for #907
Conflicts:
	lib/common/empire.py
2018-01-06 16:52:03 -05:00
xorrior 617a663270 Copied all server responses from the http_com listener 2018-01-05 12:16:26 -05:00
xorrior f016267b9b Patch for agent-failed-checkins 2018-01-05 12:12:16 -05:00
xorrior a0234bd195 2.4 Release 2018-01-04 00:56:08 -05:00
xorrior 8895e13a6c Merge branch 'dev' into kerberoast-fix
Conflicts:
	.circleci/config.yml
	changelog
	empire
	lib/common/stagers.py
2018-01-02 15:42:08 -05:00
xorrior 192630dedd Minor changes for the install_path. My bad 2017-12-29 15:31:15 -05:00
xorrior 9e3ef8a296 Modified path completion for stager and agent source 2017-12-29 15:08:11 -05:00
Gabriel Ryan 8c4f7c613e http Listener now evades Nessus plugin 99592
The http Listener now evades Nessus plugin 99592, which uses signature-based methods to identify Empire http Listeners. The following enhancements were added to the http Listener in order to accomplish this:

 - The http Listener behaves more like a “real” web server (making its signature more generic)
 - Hardcoded text specific to Werkzeug and Empire has been replaced by generic content
 - The Content-Length for default and error pages is now randomly set on startup
2017-12-28 00:46:34 -06:00
Dakota Nelson c9332c3dac add pyminifier 2017-12-27 20:47:18 -07:00
xorrior 125a98fd1a Fix for #831. Include 'po' or 'py' in the stager path to request a language specific stager. Default response will return otherwise 2017-12-18 12:21:05 -05:00
xorrior 162bf1727f Fix for #831. Include 'po' or 'py' in the stager path to request a language specific stager 2017-12-18 12:17:11 -05:00
xorrior 659b15f86c Added check to helpers.get_config to dynamically add missing column 2017-12-18 12:00:59 -05:00
xorrior 24a59efe3b Merge Templating engine changes 2017-12-18 11:20:28 -05:00
xorrior 6932decba3 Merge branch 'pycrypto-rm' of https://github.com/elitest/Empire into elitest-pycrypto-rm 2017-12-18 01:49:19 -05:00
Dakota Nelson e8b7fd0af1 remove unnecessary import 2017-12-14 16:24:51 +00:00
Dakota Nelson 5869f0144d update dropbox stager to use template engine 2017-12-14 16:04:49 +00:00
Dakota Nelson 855408bb75 Add templating engine, convert HTTP python stager to use jinja template. Also:
- deprecate strip_python_comments
	- add jinja2 dependency in install.sh
2017-12-14 13:52:17 +00:00
xorrior 0ed51ae1c4 Removed print statements from screensaver_alleyoop module 2017-12-13 20:02:18 -05:00
xorrior 278bf8417a Modified python launcher string with full python path (/usr/bin/python) 2017-12-11 18:18:35 -05:00
Chris Ross 94f188c3a0
Merge pull request #843 from kost/fixproxycreds
Fix error when ProxyCreds is set to none
2017-12-07 23:31:01 -05:00
Chris Ross 7e0809f562
Merge pull request #847 from jetsecurity/fix_distinct_ports
Allow distinct values between the Host and Port options
2017-12-07 23:04:56 -05:00
Liam Somerville 049cc5e527
Update to fix error
Fixes `!] Exception: Stagers instance has no attribute 'installPath'` when running.
2017-12-07 14:22:22 -07:00
Chris Ross b311399743
Merge pull request #836 from leoloobeek/dev
Add custom HTTP headers to ie_com listener
2017-12-05 17:46:35 -05:00
Chris Ross c5ee1841ed
Merge pull request #826 from cobbr/empire-dev
Obfuscation bug fixes/improvements, ScriptBlockLogging bypass update
2017-12-03 23:03:31 -05:00
Chris Ross 8ddeb63137
Merge pull request #844 from kost/fixemptybomutils
Fix empty bomutils folder
2017-12-03 01:21:34 -05:00
xorrior dad46533da Added redirector listener. Complete 2017-12-03 01:14:44 -05:00
xorrior 58d0775a54 Initial commit for Redirector listener. (WIP) 2017-12-02 09:41:15 -08:00
xorrior 6495980444 Added pwd alias 2017-11-30 18:32:50 -08:00
xorrior d678ea7333 Added python cat alias 2017-11-30 18:28:43 -08:00
xorrior 6ddba3f0ee Fixed ls_m module generate function sig 2017-11-30 18:26:47 -08:00
xorrior 99a9a4a6fa Renamed osx ls module 2017-11-30 18:24:34 -08:00
xorrior c95cc7cddd Added pwd alias 2017-11-30 07:50:18 -08:00
xorrior 211d365aa4 Added python cat alias 2017-11-30 07:14:27 -08:00
xorrior 5c69be36c1 Fixed ls_m module generate function sig 2017-11-30 06:09:26 -08:00
xorrior e39f8d423a Renamed osx ls module 2017-11-30 06:05:14 -08:00
Vlatko Kosturjak 7afe3c73fe Fix error when ProxyCreds is set to none
Fix following error:
(Empire: stager/multi/launcher) > execute
[!] Exception: list index out of range
2017-11-30 07:31:32 +01:00
xorrior 16e4467557 Added background shell exec 2017-11-29 19:06:55 -05:00
xorrior eea19fced5 Added native_screenshot_mss module 2017-11-29 14:52:32 -05:00
xorrior 87ec0ff9aa Added native_screenshot_mss module 2017-11-29 14:51:48 -05:00
xorrior 3558acba42 Swapped native_screenshot module. Now uses python-mss and drops image to disk 2017-11-29 14:10:14 -05:00
xorrior d615e99352 Swapped native_screenshot module. Now uses python-mss and drops image to disk 2017-11-29 14:08:12 -05:00
jetsecurity cb1cb96306 Allow distinct values between the Host and Port options
Setting the Host option automatically modifies the Port option, and
vice versa.   Consequently, a single http listener can't be configured
to work with port forwarding.

TODO: fix the listeners: the port in the Host option is currently
overwritten with the Port option if BindIP is an IPv6 address
(contains ':').
2017-11-29 02:23:08 +01:00
xorrior b8cda099ce Fixed pythonscript command in python agent
Conflicts:
	lib/common/empire.py
2017-11-26 22:48:20 -05:00
xorrior 8627462394 Fixed pythonscript command in python agent 2017-11-26 22:42:01 -05:00
Leo Loobeek 6e33630764 Added code to the http_com stager for custom HTTP headers 2017-11-26 20:44:13 -06:00
Leo Loobeek 5a0765f7e9 Updated http_com listener to support custom headers 2017-11-26 09:38:50 -06:00
Leo Loobeek 31c594edad Removed hardcoded CF-RAY header for http_com listener and allowed for user to choose this header 2017-11-21 16:42:08 -06:00
cobbr 89d0deb63a Improved ScriptBlockLogging Bypass 2017-11-16 22:32:51 -06:00
cobbr f6d36c0067 PowerShell Beta.9 Fix, launcher_vbs bug fix, improved PowerShell install, Updated Invoke-Obfuscation 2017-11-16 21:56:37 -06:00