Dev3 #1272

peyu123 · 2018-11-16T14:11:12Z

ordered_dict

Retrieves IP addresses and usernames using event ID 4769 this can allow identification of a users machine. Can only run on a domain controller.

Needed to get results to display so used Out-String.

Install fix Kali

… get detected by Defender yet, the original way flagged HackTool:PowerShell/PSAttack.B warning in windows Defender. New way raises no red flags (for now)

…o OneLogicalMyth-master

Corrected `docker pull` syntax

Closes PR 1307

(cherry picked from commit 041316c)

Closes PR #1297

(cherry picked from commit 66d10e2)

(cherry picked from commit b19b7e6)

…e version

xar 1.6.1 retrieved from https://github.com/mackyle/xar, patched for libssl1.1

Install on Ubuntu: select the ps package source by stored version number

added OutputFormat parameter to Invoke-Kerberoast

Initial commit of powershell/collection/toasted

@phra

Credit to @phra, closes #1292

Closes #1293 and #1294

root and others added 30 commits October 12, 2017 17:24

Merge branch 'master' of github.com:EmpireProject/Empire

b7d9b23

Update http.py

afe05b9

Update helpers.py

bf5f903

Update helpers.py

044c94b

Added module Get-KerberosServiceTicket

9f79c72

Retrieves IP addresses and usernames using event ID 4769 this can allow identification of a users machine. Can only run on a domain controller.

minor bug fix missing a comma

9023ec2

added Out-String

378a00d

Needed to get results to display so used Out-String.

Merge remote-tracking branch 'upstream/master'

622b57b

Event type fix for SadProcessor

d8236ad

Adds script and params for failed logon triggering

06ef000

Update install.sh

c04655d

Update install.sh

ed81d5d

Fix exception when disabling a listener

53cdd71

Fix agent downloads

b966827

Lower verbosity when agents check in

3b10844

update version

df93581

Merge branch 'mr64bit-2.5-fixes' into dev

908190a

Merge pull request #1032 from SadProcessor/SadProcessor-Install_Kali

480d60b

Install fix Kali

Update helpers.py

b1db58c

Update http_com.py

adb0265

Update http_com.py

67b1ef7

Fix stager string with escaped characters

5f4afe8

Merge remote-tracking branch 'upstream/master'

338e00d

Create get_subnet_ranges.py

ee16f04

Typo

847bfcf

another typo -_-

c41a6c0

minuscule change in bypassing amsi, which at time of writing does not…

e2c7409

… get detected by Defender yet, the original way flagged HackTool:PowerShell/PSAttack.B warning in windows Defender. New way raises no red flags (for now)

Merge branch 'master' of https://github.com/OneLogicalMyth/Empire int…

79a6d0f

…o OneLogicalMyth-master

Merge branch 'OneLogicalMyth-master' into dev

2c7e8cf

Fix for #1030

5659be6

peyu123 reopened this Nov 16, 2018

mr64bit and others added 29 commits November 21, 2018 12:05

Remove whitespace from line ends

ce78744

Move apt-get update commands in setup script back

10cde40

Restrict urllib3 version to <1.23

85a6ec6

HostRecon.py

b8c0f5b

HostRecon.ps1

2f4e546

Move module to correct directory, conform to module naming scheme

566008e

Add client secret parameter to Onedrive listener

a36e4a1

Fix client_secret params for Onedrive listener

60f04b9

Update .gitignore

1bd38e9

added OutputFormat parameter to Invoke-Kerberoast

b12595e

Update Dockerfile

ab64ff9

Corrected `docker pull` syntax

Merge branch 'L3vi47h4N-Dockerfile' into dev

5d4584c

Closes PR 1307

Update redirector.py

699909b

(cherry picked from commit 041316c)

Add more explicit error for starting redirector on non-elevated agent

2b42db6

Merge branch 'redirector-elevate-check' into dev

aa2ffff

Closes PR #1297

feat: make bypasses configurable, fixes #1288

6b86fbd

(cherry picked from commit 66d10e2)

feat: add rastamouse AMSI bypass, fixes #1290

2e277b1

(cherry picked from commit b19b7e6)

Ubuntu install: select the powershell package source by stored releas…

622fdc9

…e version

Change install script to use libSSL1.1 when available

be75570

Powershell still needs libicu57, upgrade xar for libssl1.1

637c60b

xar 1.6.1 retrieved from https://github.com/mackyle/xar, patched for libssl1.1

Merge pull request #1319 from UlrichBerntien/install-ubuntu-18

291bd66

Install on Ubuntu: select the ps package source by stored version number

Merge pull request #1304 from Zer1t0/dev

3af8284

added OutputFormat parameter to Invoke-Kerberoast

Fix bypass changes

029f51c

Merge branch 'phra-configurable-bypasses' into dev

da5fc61

Merge pull request #1258 from quickbreach/dev

1dd70a9

Initial commit of powershell/collection/toasted

Keep user agent from being obfuscated, fixes #1308

eaba0c9

Merge branch 'dev' of github.com:EmpireProject/Empire into dev

ca41a31

Update Invoke-Obfuscation to 1.8 (6a6b0fc)

6a70e59

Credit to @phra, closes #1292

Update Invoke-Mimikatz to 2.1.1 20191209

7efb7ee

Closes #1293 and #1294

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Dev3 #1272

Dev3 #1272

peyu123 commented Nov 16, 2018

Dev3 #1272

Are you sure you want to change the base?

Dev3 #1272

Conversation

peyu123 commented Nov 16, 2018