evs-ch
c1da4a060f
allow new pyOpenSSL, somewhat "better" fix for #697
2017-10-25 10:18:17 +02:00
rvrsh3ll
c8217e87cf
Fix for stagerURI
2017-10-24 10:30:03 -04:00
xorrior
3c462999c7
Merge branch 'master' of https://github.com/EmpireProject/Empire
2017-10-12 18:26:32 -04:00
xorrior
67483f4008
Update Version string
2017-10-12 18:26:09 -04:00
Chris Ross
97cf473cb7
Update changelog
2017-10-12 14:58:36 -04:00
xorrior
7031103caa
Fix conflicts
2017-10-12 12:24:51 -04:00
xorrior
442fbbb86d
Fix conflict
2017-10-12 12:21:37 -04:00
xorrior
4aea7272f0
Merged with master
2017-10-12 12:15:44 -04:00
xorrior
2df99d25fd
Fixed #716
2017-10-07 23:43:08 -04:00
xorrior
2755d24efa
Added missing semi colon in launcher code
2017-10-07 23:16:11 -04:00
xorrior
5c76a34f01
Fixed #675,#697, and #710
2017-10-07 22:39:41 -04:00
xorrior
4bf2e3da70
Merge branch 'dev/remote' with 'dev/local'
2017-10-07 21:39:58 -04:00
xorrior
b944a188d2
Fixed obfuscate helper function
2017-10-07 21:38:29 -04:00
Steve Borosh
8ae46ad4b2
Update changelog
2017-10-07 17:10:26 -04:00
Steve Borosh
20ccb05b13
Merge pull request #734 from ThePirateWhoSmellsOfSunflowers/improve-chromedump
...
Improve Get-ChromeDump
2017-10-07 17:09:45 -04:00
Steve Borosh
a4260b4c1b
Update changelog
2017-10-07 17:00:58 -04:00
Steve Borosh
3641eb189c
Merge pull request #737 from dchrastil/dev
...
Slack Integration - Notification for new Agents
2017-10-07 17:00:22 -04:00
Steve Borosh
408782a265
Merge pull request #740 from cobbr/empire-dev
...
Improved ScriptBlock logging bypasses
2017-10-07 16:51:26 -04:00
Steve Borosh
4e1bd45b8d
Update changelog
2017-10-07 16:45:29 -04:00
cobbr
bcf775cfc0
Improved ScriptBlock logging bypasses
2017-10-07 15:21:13 -05:00
Danny Chrastil
46c670cda0
Fixed comments
2017-10-03 21:10:03 -07:00
Danny Chrastil
4f42c9d2bb
Moved slackMessage() to helpers.py
2017-10-03 21:07:14 -07:00
Danny Chrastil
8b71dd8eb8
Added Slack Notifications
2017-10-02 13:09:40 -07:00
ThePirateWhoSmellsOfSunflowers
da3cc8d8e2
Improve Get-ChromeDump
2017-10-02 14:45:42 +02:00
Steve Borosh
1b71b729cc
Merge pull request #733 from EmpireProject/revert-721-dev
...
Revert "DBX Improvements (SOCKS, Hide window via WindowHandler)"
2017-09-30 21:04:11 -04:00
Steve Borosh
4fa5708ec6
Revert "DBX Improvements (SOCKS, Hide window via WindowHandler)"
2017-09-30 21:03:07 -04:00
Steve Borosh
5186107756
Update changelog
2017-09-30 20:54:26 -04:00
Steve Borosh
4bafcf8ae1
Merge pull request #721 from IljaSchumacher/dev
...
DBX Improvements (SOCKS, Hide window via WindowHandler)
2017-09-30 20:53:24 -04:00
Steve Borosh
e337a1d1cf
Update changelog
2017-09-30 20:34:52 -04:00
Steve Borosh
0eb5aa37dd
Merge pull request #725 from elitest/AES-Kerberoast
...
Aes kerberoast
2017-09-30 20:32:22 -04:00
rvrsh3ll
e03297cf40
Fix indent error in stages.py
2017-09-30 20:18:34 -04:00
Steve Borosh
5e92df645c
Merge pull request #722 from hightopfade/dev
...
generate_upload function added to Stagers
2017-09-30 17:05:23 -04:00
Steve Borosh
ae9ee2a59c
Update changelog
2017-09-30 16:40:45 -04:00
Steve Borosh
9faef56d6d
Update changelog
2017-09-30 11:32:29 -04:00
Steve Borosh
223079597c
Merge pull request #728 from dirkjanm/dev
...
Fixed custom proxy config in launcher code
2017-09-30 11:31:15 -04:00
Steve Borosh
eae352903c
Update changelog
2017-09-30 11:28:14 -04:00
Steve Borosh
0f04dd9a0d
Merge pull request #730 from clr2of8/dev
...
Hide true host name when using domain fronting
2017-09-30 11:27:11 -04:00
Carrie Roberts
d73c4a1d20
Request Root URL from agent when domain fronting
2017-09-29 15:48:45 -06:00
Carrie Roberts
add9ef3acb
added error handling in case call to root URL returns 403
2017-09-29 14:56:29 -06:00
Carrie Roberts
464bccbdde
Hide true host name when using domain fronting, without this change the true host name shows up in the TLS client hello
2017-09-28 16:09:08 -06:00
Dirkjan Mollema
effe3954e1
Also fixed proxy in dbx.py
2017-09-28 17:11:32 +02:00
Dirkjan Mollema
6f59ee7b34
Fixed custom proxy config in launcher code
2017-09-28 16:53:11 +02:00
IljaSchumacher
9bc854826d
Add "BypassHidden" option to multi/launcher for DBX listeners.
...
Many AV detect the "-w 1" or "-w Hidden" option in powershell as suspicious.
Setting the "BypassHidden option in the multi/launcher to True
generates a launcher that will rather use the WindowHandler from User32.dll to
hide the powershell window instead of using "-w hidden".
Also it will remove "-w hidden","-W 1" etc. from the Launcher command string.
2017-09-27 16:33:41 +02:00
Jim Shaver
7b4e202bab
Added in changes from 0ffca14
2017-09-26 17:44:45 -07:00
Jim Shaver
77741b83aa
Fix spacing
2017-09-26 16:11:40 -07:00
Jim Shaver
25be0c1e48
Add support for AES Kerberoasting
2017-09-26 16:06:23 -07:00
xorrior
eccdbfb7cd
Adjust cert path
2017-09-26 11:49:25 -07:00
xorrior
61d62d22da
Adjusted cert path
2017-09-26 11:48:23 -07:00
rvrsh3ll
b720b7996e
Add stager option and bypass uac module
2017-09-26 10:13:21 -04:00
root
930bc09be2
added generate upload function and example code
2017-09-25 10:10:10 -04:00