2ecd16a4e4
Add configurable jitter to all implants
2019-04-02 09:46:14 +01:00
76537b8d48
Fix indenting
2019-04-01 20:46:40 +01:00
93864cdca2
Remove redirecting stash to /dev/null in Update.sh
2019-03-31 11:02:24 +01:00
49dd5fdb03
Fix migrate, remove one line after username and autoload powerview if resolve-ipaddress is called
2019-03-27 11:28:53 +00:00
a5d5e2cec8
Posh_v4_x64.dll no longer flagged by AVG
2019-03-14 15:16:39 +00:00
71453c369e
Fix variable names
2019-03-14 09:22:15 +00:00
ec92116def
Refactor payload names for clarity; Add ability to specify the default migration process in the _migrate payloads
2019-03-13 14:50:33 +00:00
76317f9ce6
Slim Shellcode & Shellcode_migrate
...
* Remove printf statements as there's no console so can't be seen (removes strings and printf stub reducing size)
* Remove redundant includes
* Exit if process injection fails in both cases
* Remove processId parameter from Shellcode.c as there's a while(1) sleep so we only want to inject into this process in this case
* Only create netsh process in Shellcode_migrate.c if a processId parameter is not passed
2019-03-13 10:32:39 +00:00
7a3f267993
Update Bloodhound (again!)
2019-03-13 08:52:00 +00:00
36ae7ece59
Update changelog
2019-03-12 20:37:20 +00:00
31bf485ac7
Pull out payloads from Payloads.py; Add base64 encoded binary payload files; Fix whitespace issues that were triggering.
2019-03-12 20:33:45 +00:00
321469cc40
Format opsec command nicer and update SafetyDump
2019-03-12 14:00:22 +00:00
ae3ab86d2c
Update Bloodhound modules
2019-03-12 13:17:13 +00:00
4d208db32e
Add comments differentiating Port and ServerPort
2019-03-12 13:10:24 +00:00
9ce9401f20
Update changelog
2019-03-12 10:25:55 +00:00
28e00dc5b5
Update SafetyDump
2019-03-12 10:19:08 +00:00
eee5a50bbc
Tinker with ADS
2019-03-12 10:19:08 +00:00
6451f19205
Fix missing imports
2019-03-12 10:19:08 +00:00
a3e64f9768
Modularised
2019-03-12 10:19:08 +00:00
87ad76d64c
Imports sorted
2019-03-12 10:19:08 +00:00
5ab47c5a76
Rework imports to improve dependency management
2019-03-12 10:19:08 +00:00
707dc93fa2
Add ability to upload file to ADS
2019-03-12 10:16:54 +00:00
5a6afd605a
Update changelog
2019-03-12 10:16:54 +00:00
4c1510f525
Add file hashing to upload-command
2019-03-12 10:16:54 +00:00
ba10568895
Update SafetyDump
2019-03-12 10:15:58 +00:00
7f33a21f09
Add SafetyDump to posh
2019-03-12 10:15:58 +00:00
c873312002
Add known issues to README
2019-03-12 10:15:58 +00:00
db011a1abb
Update changelog with new modules
2019-03-12 10:15:58 +00:00
f18fd676f8
Add KeeThief modules and Watson.exe module
2019-03-12 10:15:58 +00:00
2539645b71
Minor refactoring for performance
2019-03-12 10:15:58 +00:00
908fa81977
Fix quickstart log spacing
2019-03-12 10:15:58 +00:00
39f755f67b
Removed parse-mimikatz as now the "opsec" command parses this information from the command output
2019-03-08 10:32:55 +00:00
1af35a9603
uploaded-file
2019-03-08 08:27:38 +00:00
9599c5e2d1
Fixed upload-file in opsec
2019-03-08 08:07:01 +00:00
1b76ccfe57
Truncated large output in CSV/HTML to stop this being > 100MB. Re-added Parse-Mimikatz feature. Updated CS dropper to work on Server 2003 with .NET v4.
2019-03-07 09:34:19 +00:00
8a092df9d6
Use default credentials for the proxy if none provided
...
The UseDefaultCredentials on WebClient (if true) will send creds to the server if requested not the proxy. The Proxy object on WebClient is a IWebProxy which only has a Credentials member (yes could probably cast to WebProxy). This change will send the default creds to the default proxy server
2019-03-06 10:31:02 +00:00
5bb677d3d1
Updated install notes
2019-02-28 08:58:16 +00:00
bac8cf8d91
added encoding to export to CSV
2019-02-27 13:50:23 +00:00
104d8b59e1
Print CSV output
2019-02-26 19:15:04 +00:00
26e8446bee
Added CSV output and searching on context in tasks HTML file
2019-02-26 19:12:34 +00:00
e55e3df949
Moved Implant-Core.cs to dropper.cs in line with other changes
2019-02-20 16:25:53 +00:00
e94f401da6
Added ImplantID to the C2Server window for all new implants
2019-02-20 16:11:27 +00:00
2802fac07a
Added * for High Integrity Process on C# and Powershell implants
2019-02-20 15:58:24 +00:00
64e5191c8b
Added DaisyChain to autoloads
2019-02-20 15:20:57 +00:00
7eb6d969ba
Removed C2Viewer.py and added instructions for same functionality to readme just using system commands
2019-02-13 16:38:17 +00:00
892a3f32f7
Move service instructions to readme so that poshc2.service can just be copied to /lib/systemd/system
2019-02-13 16:38:06 +00:00
0c8126cdae
Display the username in the task information if it is set
2019-02-13 13:12:27 +00:00
4e5c8e1fec
Fix loadmodule task output being overwritten in db
2019-02-13 12:56:45 +00:00
fa3130ded6
If default-beacontime is wrong return to startup after error
2019-02-13 10:19:46 +00:00
c75016e506
Fix beacon command to support setbeacon set-beacon and beacon again
2019-02-13 09:29:20 +00:00
m0rv4i
benpturner
rolen