Commit Graph

36 Commits (c4dcb4653caec261c59df2bf003e407d90c0e7af)

Author SHA1 Message Date
xorrior 4aea7272f0 Merged with master 2017-10-12 12:15:44 -04:00
xorrior 5c76a34f01 Fixed #675,#697, and #710 2017-10-07 22:39:41 -04:00
xorrior 4bf2e3da70 Merge branch 'dev/remote' with 'dev/local' 2017-10-07 21:39:58 -04:00
xorrior b944a188d2 Fixed obfuscate helper function 2017-10-07 21:38:29 -04:00
Danny Chrastil 4f42c9d2bb Moved slackMessage() to helpers.py 2017-10-03 21:07:14 -07:00
cobbr b0f647d4b9 Better powershell install, obfuscation bug fixes, fixed vbs/macro launchers 2017-09-10 02:12:46 -05:00
rvrsh3ll 0e94876a56 Initial commit of Empire 2.1
Merge branch 'dev'
2017-08-28 08:48:47 -04:00
root 6eecd5e707 Fixed struct error 2017-08-26 04:03:16 +00:00
malcomvetter f8a4d8208d Capture OSX credentials from the Prompt Module in the Empire DB 2017-08-14 20:46:34 -05:00
Ryan Cobb f776011e2f Merge pull request #8 from EmpireProject/master
Merge latest Empire commits
2017-06-18 22:59:28 -07:00
cobbr 76f1e85375 Fixed Invoke-Obfuscation command token error during agent negotiation process 2017-06-19 00:28:21 -05:00
xorrior 37c72f0428 Fix for #567 2017-06-09 23:28:42 -04:00
cobbr d11221bead Merge latest Empire commits 2017-05-15 18:44:05 -05:00
rvrsh3ll 9602cf4184 Empire 2.0 Commit 2017-05-14 09:32:13 -04:00
bneg eeae4ead0e Switch to netifaces() for getting interface name, fixes bug on Ubuntu where IP wasn't populated 2017-04-25 21:36:06 -07:00
cobbr 8d1efea1b9 Merge branch '2.0_beta' of https://github.com/EmpireProject/Empire into EmpireProject-2.0_beta 2017-04-22 21:08:55 -05:00
cobbr dac5ba6b39 Improved preobfuscate command, better support for invoke-obfuscation style obfuscate commands, added warning message when trying to obfuscate without PowerShell installed 2017-04-22 20:17:28 -05:00
rvrsh3ll eb7f1d6483 IPv6 Modifications 2017-04-07 21:50:53 -04:00
cobbr ab1b3e5f3f Implement Obfuscation 2017-03-11 17:35:17 -06:00
HarmJ0y 26cd0089dd 2.0.0 beta, DerbyCon release 2016-09-23 14:04:35 -04:00
Harmj0y c2ba61ca8d added -sta to stager launching 2016-03-25 19:45:09 -04:00
Harmj0y d67bbcce15 more small bug fixes 2016-03-22 14:37:10 -04:00
Harmj0y 502dc5c679 Added SSL and basic token auth to the RESTful API
Added random RESTful API token generation on server startup
2016-03-22 01:41:48 -04:00
Harmj0y 97335b83d6 -Added the ability to specify multiple function names to helpers.generate_dynamic_powershell_script()
-Added Unconstained option to get_computer
-Added AdminCount option to get_user
-Added situational_awareness/network/powerview/get_gpo_computer to get computers a GPO is applied to
2016-03-19 10:53:28 -04:00
Harmj0y d5db75c3d0 -Updated PowerView.ps1 code
-Re-tested all powerview modules
-Updated some module options
-Fixed bug in helpers.generate_dynamic_powershell_script()

-Added situational_awareness/network/powerview/get_domain_policy
-Added situational_awareness/network/powerview/get_dfs_share
-Added situational_awareness/network/powerview/get_fileserver
-Added situational_awareness/network/powerview/get_rdp_session
-Added situational_awareness/network/powerview/get_site
-Added situational_awareness/network/powerview/get_subnet
-Added situational_awareness/host/get_proxy
-Added situational_awareness/host/get_pathacl
-Added management/get_domain_sid
2016-03-19 08:38:18 -04:00
Harmj0y 75ea648c49 Small bug fixes. 2016-02-16 01:53:16 -05:00
Harmj0y 7db7ec6bbc All PowerUp modules now dynamically built from a single source file
PowerUp bug fixes
Added privesc/powerup/service_exe_restore, pulled logic from other modules
Added management/spawnas to spawn agents with explicit credentials
Debug functionality (--debug) now outputs the source of the last tasked script to ./LastTask.ps1
Write-Verbose and Write-Debug lines now stripped from tasked scripts
2015-11-08 18:51:57 -05:00
Harmj0y 0cbdb165a2 -Updated powerview.ps1 source to Version 2.0
-Built a way to dynamically generate the stripped PowerView code for functions needed by PowerView modules (helpers -> generate_dynamic_powershell_script), and updated all relevant PowerView modules
-Renamed PowerView modules to better match PowerView 2.0 naming scheme and moved to situational_awareness/network/powerview/*
-Removed old split-out PowerView source files
-Removed situational_awareness/network/netview
-Combined stealth_userhunter into option for userhunter
-Added situational_awareness/network/get_forest_domain, situational_awareness/network/powerview/get_object_acl, situational_awareness/network/powerview/find_computer_field, situational_awareness/network/powerview/find_user_field, situational_awareness/network/powerview/get_ou, situational_awareness/network/powerview/get_group, situational_awareness/network/powerview/get_group_member, situational_awareness/network/powerview/get_gpo, situational_awareness/network/powerview/find_gpo_location, situational_awareness/network/powerview/find_gpo_computer_admin, situational_awareness/network/powerview/process_hunter, situational_awareness/network/powerview/find_foreign_group, situational_awareness/network/powerview/find_foreign_user
-renamed collection/filesearch to collection/find_interesting_file
2015-10-23 21:40:06 -04:00
Harmj0y e1cdef1d19 Removed print output 2015-08-30 15:47:47 -04:00
Harmj0y c021bdf6f3 Credentials from collection/prompt now scraped into the creds db 2015-08-29 20:34:23 -04:00
sixdub 32e95b4f93 Fixed credential parsing bug 2015-08-24 18:42:32 -04:00
Harmj0y b2cca2f3fd Added credentials/mimikatz/dcsync for remote DC credential extraction
Added situational_awareness/network/get_domaintrusts
Added /sids argument for credentials/mimikatz/golden_ticket
Added credential parsing for dcsync output
updated links for PowerTools
2015-08-24 17:33:35 -04:00
Harmj0y 54c7300998 Tweaks to fix for issue #23 2015-08-21 15:24:12 -04:00
Harmj0y b434102f2c Error handling for issue #23 2015-08-21 14:17:55 -04:00
sixdub 4a1a4e6960 Fixed IOError 2015-08-14 09:43:12 -04:00
Harmj0y 751d0c15d6 Initial BSidesLV '15 release of v1.0.0 2015-08-05 14:36:39 -04:00