4f42c9d2bb
Moved slackMessage() to helpers.py
2017-10-03 21:07:14 -07:00
8b71dd8eb8
Added Slack Notifications
2017-10-02 13:09:40 -07:00
4fa5708ec6
Revert "DBX Improvements (SOCKS, Hide window via WindowHandler)"
2017-09-30 21:03:07 -04:00
4bafcf8ae1
Merge pull request #721 from IljaSchumacher/dev
...
DBX Improvements (SOCKS, Hide window via WindowHandler)
2017-09-30 20:53:24 -04:00
e03297cf40
Fix indent error in stages.py
2017-09-30 20:18:34 -04:00
5e92df645c
Merge pull request #722 from hightopfade/dev
...
generate_upload function added to Stagers
2017-09-30 17:05:23 -04:00
223079597c
Merge pull request #728 from dirkjanm/dev
...
Fixed custom proxy config in launcher code
2017-09-30 11:31:15 -04:00
0f04dd9a0d
Merge pull request #730 from clr2of8/dev
...
Hide true host name when using domain fronting
2017-09-30 11:27:11 -04:00
add9ef3acb
added error handling in case call to root URL returns 403
2017-09-29 14:56:29 -06:00
464bccbdde
Hide true host name when using domain fronting, without this change the true host name shows up in the TLS client hello
2017-09-28 16:09:08 -06:00
effe3954e1
Also fixed proxy in dbx.py
2017-09-28 17:11:32 +02:00
6f59ee7b34
Fixed custom proxy config in launcher code
2017-09-28 16:53:11 +02:00
9bc854826d
Add "BypassHidden" option to multi/launcher for DBX listeners.
...
Many AV detect the "-w 1" or "-w Hidden" option in powershell as suspicious.
Setting the "BypassHidden option in the multi/launcher to True
generates a launcher that will rather use the WindowHandler from User32.dll to
hide the powershell window instead of using "-w hidden".
Also it will remove "-w hidden","-W 1" etc. from the Launcher command string.
2017-09-27 16:33:41 +02:00
b720b7996e
Add stager option and bypass uac module
2017-09-26 10:13:21 -04:00
930bc09be2
added generate upload function and example code
2017-09-25 10:10:10 -04:00
69fb544cd3
Add SOCKS support to Dropbox listener
2017-09-25 14:14:02 +02:00
00b8427f9b
Fix PR (generate function signature, opsec value)
2017-09-24 19:17:26 +02:00
1201232241
Merge pull request #702 from athegist/fix-launcher_vbs.py
...
Fixes vbscript string literal quoting.
2017-09-23 18:52:27 -04:00
6b17073504
Merge pull request #681 from ThePirateWhoSmellsOfSunflowers/fix-macro
...
Fix macro launcher
2017-09-23 18:42:11 -04:00
52f2618863
Merge branch 'dev' of https://github.com/EmpireProject/Empire into dev
2017-09-23 10:30:07 -04:00
3d7a07a114
Fixed killdate for both agents. Fixed working hours for python agent
2017-09-23 10:28:51 -04:00
20c17423fd
Merge pull request #711 from clr2of8/dev
...
Modified the PowerShell keylogger to write to local file instead of stdout
2017-09-23 08:39:19 -04:00
eed3453301
making the keystroke log easier to read
2017-09-22 14:59:57 -06:00
de03f902ec
Repaired function definition for generate()
2017-09-21 22:59:08 -04:00
4a95b0d6e3
Add whitespace parsing for manual add of passwords
2017-09-21 18:40:08 -04:00
1dae7bd3b5
safety check in case of untrusted sessionID
2017-09-21 11:09:02 -06:00
a2ef7dab9d
Modified the PowerShell keylogger to write to local file instead of stdout
2017-09-20 15:22:10 -06:00
55834180d4
Fix powerbreach modules
2017-09-20 16:27:05 -04:00
b1c359e4b9
Fix powerbreach modules
2017-09-20 16:22:04 -04:00
932aedb4aa
added option to expand powershell object in order to view domain policy details
2017-09-19 12:08:51 -06:00
9c7064371c
Fixes vbscript string literal quoting.
2017-09-17 14:55:35 -05:00
b0f647d4b9
Better powershell install, obfuscation bug fixes, fixed vbs/macro launchers
2017-09-10 02:12:46 -05:00
cf6f760b94
Merge pull request #676 from theguly/dev
...
add launcher_lnk with ps payload
2017-09-06 13:32:02 -04:00
df64b1e6d1
Rest fix from #657
2017-09-06 11:14:36 -04:00
2677363e50
Merge pull request #657 from byt3bl33d3r/master
...
Removed GroupName as required option in get_group_member module, reverted a commit that broke the RESTful API
2017-09-06 10:41:45 -04:00
ef7660febd
fix quotes
...
similar to #674
2017-09-05 18:23:19 +02:00
2b2096d2e4
fix macro launcher
...
Fix typo
2017-09-05 17:23:03 +02:00
b70ad183ee
add launcher_lnk with ps payload
2017-09-03 11:50:09 +02:00
cda37e726d
Added Limit option to computerdetails module
2017-08-31 21:06:24 -04:00
fb7bee6f4c
Fixed generate_launcher function sig for dbx and http_mapi listeners
2017-08-31 20:41:58 -04:00
071fd99aba
Fixed generate_launcher function sig for dbx and http_mapi listeners
2017-08-31 20:39:14 -04:00
4c513d2551
Added some additional proxy logic
2017-08-31 16:37:17 -04:00
9ebd0c163c
Added logic to use manual proxy settings through the entire staging process and then pass to the agent
2017-08-31 16:28:47 -04:00
08a3cc0dcc
Re-added Working hours logic for python
2017-08-31 12:31:59 -04:00
c80ac9c078
Re-added python working hours logic
2017-08-31 12:19:59 -04:00
19b4a7158c
working hours fix for listeners
2017-08-31 11:42:21 -04:00
1e2a4009e0
Working hours fix for all listeners
2017-08-31 11:28:24 -04:00
d1a8375048
WorkingHours fix
2017-08-31 10:54:32 -04:00
a2939533bb
small change
2017-08-31 09:23:49 -04:00
c5e8329058
added ssl import
2017-08-31 09:22:46 -04:00
79d2bdbb5f
add ssl import
2017-08-31 09:21:33 -04:00
015e0104d6
Merge fix for TLSv1 error
2017-08-31 08:54:56 -04:00
cbf934d080
Fix for TLSv1 error
2017-08-31 08:54:28 -04:00
1d97d87722
TLS v1.0 error fix in #643
2017-08-30 21:43:53 -04:00
c8334b9a66
Fixed Macro syntax error per@utkusen #664
2017-08-30 21:28:34 -04:00
a49099da92
Merge pull request #667 from jarrodcoulter/hotfix/crontab
...
Update Crontab.py
2017-08-30 20:55:52 -04:00
a7dd367f96
Partial patch for base64.b64decode error in #586
2017-08-30 19:50:10 -04:00
14efafd5a1
Update Crontab.py
...
Updated the crontab persistence so that the Hour option sets the Hour rather than the minute option. This make the crontab execute every 24 hours rather than ever x minutes.
2017-08-30 14:59:50 -04:00
463cfbd784
Obfuscation fix for MS16-135 module
2017-08-29 17:02:21 -04:00
285e993f56
Update exploit_eternalblue.py
...
Fixed per Invoke-Obfuscation requirements.
2017-08-28 21:32:11 -04:00
0e611e13bd
Revert "Revert "Fixed RESTAPI (issue #507 )""
...
This reverts commit ec13f26056
2017-08-28 18:45:37 -06:00
35f4b06fa8
Removed GroupName as required option in get_group_member module
2017-08-28 18:09:26 -06:00
be117d4ca3
Update generate function for all python modules
2017-08-28 11:14:44 -04:00
0e94876a56
Initial commit of Empire 2.1
...
Merge branch 'dev'
2017-08-28 08:48:47 -04:00
b99a24caf2
Updated version number to 2.1
2017-08-28 08:17:52 -04:00
97159646fe
Merge pull request #640 from NineFX/fix_shebangs
...
Fix shebangs
2017-08-28 00:18:37 -04:00
d76d8c924d
Merge pull request #609 from winnie22/uaclevel
...
show current UAC level
2017-08-28 00:15:12 -04:00
cbe1bc508d
Merge pull request #596 from winnie22/dev
...
Collection of bypass UAC modules based on fodhelper.exe, SDCLT and schtasks technique
2017-08-28 00:09:30 -04:00
19b279f6fe
Merge pull request #599 from arch4ngel/dev
...
Add asterisk to modules requiring elevated context when tab completing search/usemodule (Issue 598)
2017-08-27 23:58:54 -04:00
6261b5deb3
changed exit logic for python agent
2017-08-27 22:15:29 +00:00
8f7197e7cb
Merge pull request #635 from tkisason/patch-1
...
Fix typo in bunny.py
2017-08-26 00:11:28 -04:00
6eecd5e707
Fixed struct error
2017-08-26 04:03:16 +00:00
a300547e76
Fixed warnings patch
2017-08-20 14:42:19 +00:00
b79017120d
Merge pull request #590 from Viss/patch-1
...
Silencing warnings
2017-08-18 09:05:50 -04:00
332b78d07c
Fix shebangs
...
Move shebangs to /usr/bin/env foo
2017-08-16 01:41:22 -04:00
5acef7a560
Merge pull request #638 from EmpireProject/background_downloads
...
Background downloads
2017-08-15 22:26:22 -04:00
670e6a11d9
..
2017-08-15 18:10:20 -07:00
8c834a9e5b
Changed Needs admin to true
2017-08-15 10:48:07 -04:00
8d33585e9d
fixed path
2017-08-15 07:40:40 -07:00
5b01f6c8d6
Still testing
2017-08-14 19:39:09 -07:00
f8a4d8208d
Capture OSX credentials from the Prompt Module in the Empire DB
2017-08-14 20:46:34 -05:00
6a13c5cbab
Testing
2017-08-14 18:11:01 -07:00
1d763e5220
Changed agents.py
2017-08-14 16:53:11 -07:00
986485ed29
More testing
2017-08-14 16:50:01 -07:00
c2a1639d7b
Adjusted chunk size
2017-08-14 14:20:35 -07:00
5ef3c0871e
Download test
2017-08-14 11:53:26 -07:00
71fc7c85a2
Fix typo in bunny.py
...
Fixed typo, since @viss made fun of it on Slack :)
2017-08-11 23:41:58 +02:00
dcf7207fb6
Added manual proxy specification and credentials
2017-08-11 15:19:09 -04:00
cb64325538
Obfuscated empire changes
2017-08-11 09:41:23 +02:00
75cc9c00b5
Obfuscated empire changes
2017-08-11 09:33:04 +02:00
bdbb6f25e3
Merge pull request #633 from checkyfuntime/patch-1
...
Create dyld_print_to_file.py
2017-08-09 18:32:27 -04:00
834b9be663
Fix command line arguments
2017-08-09 14:52:32 -04:00
28fa1905ff
Create dyld_print_to_file.py
...
Empire module for exploitation of Mac OSX's CVE-2015-3760 (DYLD_PRINT_TO_FILE) exploit.
2017-08-06 13:04:21 -04:00
517508d0d6
Add mimipenguin
2017-07-31 17:34:56 -04:00
b3b80cb6a8
Merge pull request #622 from EmpireProject/unicode-improvement
...
Unicode stage improvements
2017-07-28 09:27:38 -07:00
7a6e1ccb42
stage improvments
2017-07-27 23:20:14 -07:00
f3f15eeecd
Merge pull request #603 from cobbr/dev-bypass-logs
...
Bypass ScriptBlock Logging
2017-07-24 23:25:40 -07:00
59d86e4598
show current UAC level
2017-07-11 20:41:17 +02:00
0a6ee7c082
Changed ScriptBlock Logging bypass to not contain suspicious strings
2017-07-09 16:34:08 -05:00
ff7ef55cdf
Bypass ScriptBlock Logging
2017-07-05 00:56:13 -05:00
11c5940d7c
Fixed merge collision
2017-07-04 21:35:24 -05:00
e68987ec7f
Bypasses UAC based on James Forshaw findings
2017-07-04 12:56:56 +02:00
82d20934e0
opsec fix
2017-07-04 10:26:53 +02:00
bdb89bd1cb
UAC Bypass based on enigma0x3 SDCLT technique
2017-07-03 15:50:15 +02:00
a1f2a79a9d
Correcting hard tabs
2017-07-03 08:11:00 -04:00
ad42e85076
Show modules requring elevated context with an asterisk(*) when tab completing
2017-07-03 07:56:47 -04:00
fe15c4f305
changed opsec safe to false
2017-06-30 06:55:23 +02:00
9f16fdf594
Merge latest Empire dev commits
2017-06-29 23:17:17 -05:00
e59364efcc
Merge latest Empire-dev changes
2017-06-29 22:11:01 -05:00
42745800c3
bypass UAC module based on fodhelper.exe technique ( https://winscripting.blog/2017/05/12/first-entry-welcome-and-uac-bypass/ )
2017-06-29 15:41:52 +02:00
be7320bd9d
Silencing warnings
...
on certain systems when launching the python stager, a bunch of warnings are thrown, and it would be stealthier if that wasn't the case. This change just stops printing warnings.
2017-06-22 21:00:52 -07:00
4876227d23
ObfuscatedEmpire
2017-06-21 20:37:06 -05:00
c691830ddd
Merge branch '2.0_beta' of https://github.com/cobbr/ObfuscatedEmpire into 2.0_beta
2017-06-19 22:35:34 -05:00
8f98d642d8
Fixed Invoke-Obfuscation byte-array issue, ConfirmImpact issue, and PowerUp missing semi-colon
2017-06-19 22:35:06 -05:00
f776011e2f
Merge pull request #8 from EmpireProject/master
...
Merge latest Empire commits
2017-06-18 22:59:28 -07:00
f2b025395f
Added obfuscation to new modules
2017-06-19 00:46:30 -05:00
76f1e85375
Fixed Invoke-Obfuscation command token error during agent negotiation process
2017-06-19 00:28:21 -05:00
0b582eac36
Merge pull request #578 from dchrastil/module/prompt-sandboxmode
...
Added 'SandboxMode' to evade Apple Sandbox protection on applescript
2017-06-15 17:20:56 -04:00
7074616113
Added 'SandboxMode' option to evade Apple Sandbox protections on applescript
2017-06-13 23:34:50 -06:00
dbefbbda09
Merge pull request #569 from dchrastil/https/intermediate-certs
...
SSL Intermediate Certificates to support Domain Fronting
2017-06-12 15:25:39 -04:00
33c4f0bc6b
Revert "OCD fix for root install path having extra directory slash"
...
This reverts commit e4bf2d736a
2017-06-12 10:05:40 -07:00
ec13f26056
Revert "Fixed RESTAPI (issue #507 )"
...
This reverts commit b539e12347
2017-06-12 10:04:22 -07:00
37c72f0428
Fix for #567
2017-06-09 23:28:42 -04:00
5142bcbf51
Fix for #567
2017-06-09 23:27:31 -04:00
c25fea4e70
Updated SSL context to use the split empire-chain.pem and empire-priv.key files.
2017-06-08 08:48:42 -07:00
a165b7f7af
Merge branch 'dev' of github.com:EmpireProject/Empire into dev
2017-06-07 23:05:29 -07:00
c9959753fc
Merge pull request #557 from tevora-threat/dropboxpull
...
Addition of DropBox Exfil Module
2017-06-07 20:13:07 -04:00
b7cb687418
Merge pull request #509 from tristandostaler/dev
...
Added wmi_updater module
2017-06-06 21:38:15 -04:00
c2d865be68
Added the option for the custom launcher
2017-06-06 12:30:58 -04:00
af2bce2fb7
Added a handler for the custom launcher
2017-06-06 12:27:14 -04:00
b41f98e776
Modified the call to powershell_launcher
...
Modified the call to powershell_launcher just so there is no bug anymore
2017-06-06 12:20:48 -04:00
a629b6179a
Merge pull request #532 from ThePirateWhoSmellsOfSunflowers/add-ms16135
...
Add privesc module MS16-135
2017-06-05 23:23:43 -04:00
63e373a7da
added eternal blue exploitation module
2017-06-04 10:05:26 -07:00
6c3a6c2433
Merge pull request #531 from byt3bl33d3r/restfulapi_fixes
...
More RESTfulAPI fixes & Database fix
2017-06-03 20:08:01 -04:00
0c3170f9ca
added dropbox exfil module
2017-06-02 19:04:32 -07:00
5a530fede9
Fixed hardcoded cert path
2017-06-01 08:09:07 -04:00
f6e9ee8fff
Fixed hardcoded certpath
2017-06-01 08:06:53 -04:00
425cb7fedc
Merge branch 'dev' into restfulapi_fixes
2017-05-30 22:07:20 -06:00
c2b155202b
BloodHound update
2017-05-26 11:58:52 -04:00
6ee85e73f2
Fixed RESTAPI (issue #507 )
2017-05-26 11:58:52 -04:00
df26d264f1
Added -sta flag to launcher
2017-05-22 15:28:41 -07:00
930e31c509
Minor changes
2017-05-22 20:28:58 +02:00
b4d24f43f4
More RESTfulAPI fixes
...
- Fixed a bug where wrong id value was being instered into the results
and reporting table causing a mismatch between the reporting entry and
the results entry
- task_agent_shell() API call now returnes TaskID as well
2017-05-22 08:14:10 -06:00
15f961c058
Initial commit, add MS16-135 exploit
2017-05-21 20:49:49 +02:00
dbd6cdf66e
Merge pull request #529 from byt3bl33d3r/master
...
Fixed RESTAPI
2017-05-21 12:35:07 -04:00
e4bf2d736a
OCD fix for root install path having extra directory slash
2017-05-21 12:03:58 -04:00
6cd9c6a3d9
Merge pull request #516 from ceramicskate0/master
...
Random Macro Variable and Method Names
2017-05-21 10:38:15 -04:00
b539e12347
Fixed RESTAPI (issue #507 )
2017-05-20 15:33:03 -06:00
ead6669eb0
fixed missing variables
...
fixed missing vari and added more random name generation algo
2017-05-18 19:19:38 -05:00
772f6818b4
Update macro.py
2017-05-18 18:50:38 -05:00
72e91e55d6
fix LengthOfVari missing error
2017-05-17 11:53:08 -05:00
417e66df65
liniaal agents to use with https://github.com/sensepost/liniaal
2017-05-17 08:50:49 +01:00
d9a734a82e
Fix two more escape issues
2017-05-16 21:10:04 -05:00
4c20594217
Improved PowerShell install, fix escape display bug
2017-05-16 21:02:53 -05:00
99d0b12b1d
randomize variable names and method names
...
Make random variable and method names in VB macro code so that it looks different every time its run and runs the same every time
2017-05-16 19:59:43 -05:00
6d88e8ee1b
GetSchwifty fix
2017-05-16 09:25:27 -04:00
ec6daaba3f
GetSchwifty fix
2017-05-16 09:23:45 -04:00
7ad76fdc1f
Added get schwifty trollsploit module
2017-05-16 09:15:28 -04:00
d11221bead
Merge latest Empire commits
2017-05-15 18:44:05 -05:00
46fa5b34f9
Added wmi_updater module
2017-05-15 11:10:51 -04:00
9ee6c75362
Empire 2.0 Release
...
Merge branch '2.0_beta' of https://github.com/empireproject/Empire into 2.0_beta
2017-05-14 09:46:46 -04:00
6ee117f080
Emipre 2.0 Release
2017-05-14 09:46:22 -04:00
9602cf4184
Empire 2.0 Commit
2017-05-14 09:32:13 -04:00
2654f02552
Merge pull request #504 from n00py/2.0_beta
...
Change Agent option description [Typo]
2017-05-13 23:36:59 -04:00
dd0de873f8
Merge pull request #500 from tkisason/ducky_edit
...
Modified the ducky stager to use custom interpreter
2017-05-13 23:35:43 -04:00
f0bbd58968
Merge pull request #499 from tkisason/bunny
...
Added windows/bashbunny stager for Empire 2.0
2017-05-13 23:35:04 -04:00
395f4df482
Added Python language for dbx listener
2017-05-13 23:27:30 -04:00
c05083981f
Adjusted for powershell stager in Db listener
2017-05-13 02:00:21 -04:00
c5f57e36f4
Added db listener
2017-05-12 19:30:29 -04:00
44d61d3b28
Add DCOM Lateral Movement
2017-05-12 10:10:21 -04:00
c34377e8ce
Change Agent option description
...
The template is pre-populated with "Agent to grab a screenshot from" but that description does not apply here.
2017-05-11 10:24:56 -06:00
5d197907f4
Change Agent option description
...
The template is pre-populated with "Agent to grab a screenshot from" but that description does not apply here.
2017-05-11 10:24:03 -06:00
fb4621645d
SessionGopher
2017-05-07 22:55:11 -04:00
02e2a2dfce
SessionGopher
2017-05-07 22:11:32 -04:00
789e99d790
Modified the ducky stager
2017-05-01 17:45:51 +02:00
02aa791f17
Added windows/bashbunny stager for Empire 2.0
2017-05-01 17:41:00 +02:00
48116d35d6
Re-implemented /api/listeners/options GET Rest call
2017-04-28 22:04:10 -04:00
38054a8cc9
Merge pull request #495 from dafyk/patch-1
...
Add custom headers if any
2017-04-28 09:23:41 -04:00
eeae4ead0e
Switch to netifaces() for getting interface name, fixes bug on Ubuntu where IP wasn't populated
2017-04-25 21:36:06 -07:00
62b7c97a8d
Add custom headers if any
...
copy/pasted from http.py
2017-04-26 01:59:36 +02:00
057636c447
Invoke-Obfuscation merged into 2.0_beta
2017-04-22 21:38:40 -05:00
8d1efea1b9
Merge branch '2.0_beta' of https://github.com/EmpireProject/Empire into EmpireProject-2.0_beta
2017-04-22 21:08:55 -05:00
e1f7bda70e
Moved management/redirector to inactive modules
2017-04-22 21:31:47 -04:00
672ea33a72
Remove debug output
2017-04-22 20:19:21 -05:00
dac5ba6b39
Improved preobfuscate command, better support for invoke-obfuscation style obfuscate commands, added warning message when trying to obfuscate without PowerShell installed
2017-04-22 20:17:28 -05:00
e6fc1bebd7
Fixed dll stager for use in other platforms
2017-04-22 20:23:55 -04:00
0915ab2a66
Merge pull request #492 from ThePirateWhoSmellsOfSunflowers/fix-padding-pkcs7
...
Fix PKCS7 padding to be RFC compliant
2017-04-20 23:41:18 -04:00
a6499372fb
Merge branch 'patch-1' of https://github.com/bneg/Empire into bneg-patch-1
2017-04-20 20:21:29 -07:00
3b722d013f
Merge pull request #483 from Kevin-Robertson/2.0_beta
...
Inveigh 1.3.1 Modules
2017-04-20 21:42:41 -04:00
92cc1ec36d
Merge pull request #472 from benichmt1/wlmdr-2.0_beta
...
Add Wlrmdr.exe Popup module (Licensing Balloons) - 2.0 beta format
2017-04-20 21:29:34 -04:00
a5b9f44cad
Moved socks module
2017-04-20 21:21:39 -04:00
042f24ab3b
Merge pull request #478 from klustic/2.0_beta
...
Added a module for SOCKSv5 proxying
2017-04-20 21:17:48 -04:00
a23c636531
Fix PKCS7 padding to be RFC compliant, should resolv #458
2017-04-20 20:21:57 +02:00
534218cf31
Inveigh 1.3.1 Modules
...
Sync with Inveigh 1.3.1.
2017-04-09 16:37:51 -04:00
1ad0e12b80
Merge pull request #455 from ThePirateWhoSmellsOfSunflowers/add-proxy-headers
...
Add HTTP headers to avoid proxy caching
2017-04-09 16:16:46 -04:00
287ecd3f0a
Merge pull request #452 from n00py/2.0_beta
...
VNC Inject
2017-04-09 16:08:41 -04:00
3cafd25f51
Merge pull request #437 from 0xbadjuju/2.0_beta
...
PowerUpSQL Modules
2017-04-09 14:59:11 -04:00
9a6f8f970e
Merge pull request #404 from mr64bit/http_hop
...
Fix agent staging over http_hop listeners.
2017-04-09 09:42:52 -04:00
3baad71f09
Merge pull request #438 from erikbarzdukas/dev-monitortcp
...
New module to monitor TCP connections
2017-04-08 23:16:12 -04:00
a58e1c8d6d
Merge pull request #350 from leesoh/powershell-template
...
Documentation, reorganization, and a touch of PEP8
2017-04-08 15:32:41 -04:00
Danny Chrastil
Steve Borosh
rvrsh3ll
Carrie Roberts
Dirkjan Mollema
IljaSchumacher
root
Nikaiw
xorrior
athegist
cobbr
ThePirateWhoSmellsOfSunflowers
guly
jarrodcoulter
byt3bl33d3r
root
root
Drew Varner
malcomvetter
Tonimir Kisasondi
Petr Medonos
checkyfuntime
killswitch-gui
arch4ngel
Viss
Ryan Cobb
disk0nn3ct
tristandostaler
kevin dick
byt3bl33d3r
ceramicskate0
Etienne Stalmans
r1p
n00py
Brandon Arvanaghi
bneg
Da-FyK
Kevin Robertson