Overview

overview

10

Static

static

10

Empire-master.zip

windows10-2004-x64

1

Empire-mas...im.dll

windows10-2004-x64

1

Empire-mas...im.dll

windows10-2004-x64

3

Empire-mas...ts.txt

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    Empire-master.zip

  • Size

    8.4MB

  • MD5

    bc0ab023e25efca973031f23daa79f7b

  • SHA1

    21f4f3d03a9adf5f3b953fb8b4b0cef336f4f5d4

  • SHA256

    5a0165448fcf1fc05a1cb3a74cf58a9b8903fc919675367b04a1a2006f1a74eb

  • SHA512

    9755a2e9e028fb924826e43157545f7f492b0600a3df166d862196e78e05c5cc798b4c729496c26be98e0d3c5aaed4597681003a63996d9fe044b0832f517329

  • SSDEEP

    196608:PKJEtPXPZ2QbN4vJ2jKT3xcc5DhPrhiTeT/Uos3tfNnVwbtOvE:PxPQ2Y8cWmhiTeIjfNnVmOvE

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
ps1.dropper

https://content.dropboxapi.com/2/files/download

Extracted

Language
ps1
Source
URLs
exe.dropper

http://$CallbackIP$resource

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • Empire-master.zip
    .zip
  • Empire-master/.build.sh
    .sh .vbs linux polyglot
  • Empire-master/.dockerignore
  • Empire-master/.github/CONTRIBUTING.md
  • Empire-master/.github/ISSUE_TEMPLATE.md
  • Empire-master/.gitignore
  • Empire-master/.release.sh
    .sh .vbs linux polyglot
  • Empire-master/Dockerfile
  • Empire-master/LICENSE
  • Empire-master/README.md
  • Empire-master/VERSION
  • Empire-master/changelog
  • Empire-master/data/agent/agent.ps1
    .ps1
  • Empire-master/data/agent/agent.py
  • Empire-master/data/agent/stagers/common/aes.py
  • Empire-master/data/agent/stagers/common/diffiehellman.py
  • Empire-master/data/agent/stagers/common/get_sysinfo.py
  • Empire-master/data/agent/stagers/common/rc4.py
  • Empire-master/data/agent/stagers/dropbox.ps1
    .ps1
  • Empire-master/data/agent/stagers/dropbox.py
    .py .sh linux
  • Empire-master/data/agent/stagers/http.ps1
    .ps1
  • Empire-master/data/agent/stagers/http.py
    .py .sh linux
  • Empire-master/data/agent/stagers/http_com.ps1
    .ps1
  • Empire-master/data/agent/stagers/http_mapi.ps1
    .ps1
  • Empire-master/data/agent/stagers/onedrive.ps1
    .ps1
  • Empire-master/data/misc/ReflectivePick_x64_orig.dll
    .dll windows:5 windows x64 arch:x64

    09a13f6ef35a1b2a8ba04a3fef983b34


    Headers

    Imports

    Exports

    Sections

  • Empire-master/data/misc/ReflectivePick_x86_orig.dll
    .dll windows:5 windows x86 arch:x86

    1e38702742dec06bd15ea621421f1f5f


    Headers

    Imports

    Exports

    Sections

  • Empire-master/data/misc/Run.java
    .java .js
  • Empire-master/data/misc/apptemplateResources/empty/macho
    .macho macos arch:x64
  • Empire-master/data/misc/apptemplateResources/icon/stormtrooper.icns
  • Empire-master/data/misc/apptemplateResources/x64/launcher.app/Contents/Info.plist
    .xml
  • Empire-master/data/misc/apptemplateResources/x64/launcher.app/Contents/MacOS/launcher
    .macho macos arch:x64
  • Empire-master/data/misc/apptemplateResources/x64/launcher.app/Contents/PkgInfo
  • Empire-master/data/misc/apptemplateResources/x64/launcher.app/Contents/Resources/Base.lproj/MainMenu.nib
  • Empire-master/data/misc/apptemplateResources/x64/launcher.app/Contents/_CodeSignature/CodeResources
    .xml
  • Empire-master/data/misc/apptemplateResources/x86/launcher.app/Contents/Info.plist
    .xml
  • Empire-master/data/misc/apptemplateResources/x86/launcher.app/Contents/MacOS/launcher
    .macho macos arch:x86
  • Empire-master/data/misc/apptemplateResources/x86/launcher.app/Contents/PkgInfo
  • Empire-master/data/misc/apptemplateResources/x86/launcher.app/Contents/Resources/Base.lproj/MainMenu.nib
  • Empire-master/data/misc/apptemplateResources/x86/launcher.app/Contents/_CodeSignature/CodeResources
    .xml
  • Empire-master/data/misc/cSharpTemplateResources/cmd/cmd.sln
  • Empire-master/data/misc/cSharpTemplateResources/cmd/cmd/Program.cs
    .js
  • Empire-master/data/misc/cSharpTemplateResources/cmd/cmd/Properties/AssemblyInfo.cs
  • Empire-master/data/misc/cSharpTemplateResources/cmd/cmd/app.config
    .xml
  • Empire-master/data/misc/cSharpTemplateResources/cmd/cmd/cmd.csproj
  • Empire-master/data/misc/hijackers/template.dylib
    .dylib macos arch:x86
  • Empire-master/data/misc/hijackers/template64.dylib
    .dylib macos arch:x64
  • Empire-master/data/misc/hop.php
  • Empire-master/data/misc/inactive_modules/redirector.py
    .py .ps1
  • Empire-master/data/misc/machotemplate
    .macho macos arch:x64
  • Empire-master/data/misc/pkgbuild/expand/PackageInfo
    .xml
  • Empire-master/data/misc/pkgbuild/scripts/postinstall
    .sh linux
  • Empire-master/data/misc/python_modules/keyboard.zip
    .zip
  • keyboard/__init__.py
  • keyboard/__main__.py
  • keyboard/_darwinkeyboard.py
  • keyboard/_darwinmouse.py
  • keyboard/_generic.py
  • keyboard/_keyboard_event.py
  • keyboard/_keyboard_tests.py
  • keyboard/_mouse_event.py
  • keyboard/_mouse_tests.py
  • keyboard/_nixcommon.py
  • keyboard/_nixkeyboard.py
  • keyboard/_nixmouse.py
  • keyboard/_suppress.py
  • keyboard/_winkeyboard.py
  • keyboard/_winmouse.py
  • keyboard/mouse.py
  • Empire-master/data/misc/python_modules/mss.zip
    .zip
  • mss/__init__.py
  • mss/__main__.py
  • mss/base.py
  • mss/darwin.py
  • mss/exception.py
  • mss/factory.py
  • mss/linux.py
  • mss/screenshot.py
  • mss/tools.py
  • mss/windows.py
  • Empire-master/data/misc/templateLauncher.dylib
    .dylib macos arch:x86
  • Empire-master/data/misc/templateLauncher64.dylib
    .dylib macos arch:x64
  • Empire-master/data/misc/templateSource/Dylib.c
  • Empire-master/data/misc/templateSource/macho.m
  • Empire-master/data/misc/welcome.png
    .png
  • Empire-master/data/misc/x64_slim.dll
    .dll windows:5 windows x64 arch:x64

    e33fa59b2409cc27c004d50a412b0722


    Headers

    Imports

    Exports

    Sections

  • Empire-master/data/misc/x86_slim.dll
    .dll windows:5 windows x86 arch:x86

    d908901fdf0acd84059567ae949c1410


    Headers

    Imports

    Exports

    Sections

  • Empire-master/data/misc/xar-1.5.2.tar.gz
    .gz
  • xar-1.5.2.tar
    .tar
  • xar-1.5.2/INSTALL
  • xar-1.5.2/LICENSE
  • xar-1.5.2/Makefile.in
  • xar-1.5.2/TODO
  • xar-1.5.2/cfghdrs.stamp.in
  • xar-1.5.2/cfgoutputs.stamp.in
  • xar-1.5.2/config.guess
  • xar-1.5.2/config.sub
  • xar-1.5.2/configure
    .vbs
  • xar-1.5.2/configure.ac
  • xar-1.5.2/include/config.h.in
  • xar-1.5.2/include/xar.h.in
  • xar-1.5.2/install-sh
  • xar-1.5.2/lib/Makefile.inc.in
  • xar-1.5.2/lib/appledouble.h
  • xar-1.5.2/lib/archive.c
  • xar-1.5.2/lib/archive.h
  • xar-1.5.2/lib/arcmod.c
  • xar-1.5.2/lib/arcmod.h
  • xar-1.5.2/lib/asprintf.h
  • xar-1.5.2/lib/b64.c
  • xar-1.5.2/lib/b64.h
  • xar-1.5.2/lib/bzxar.c
  • xar-1.5.2/lib/bzxar.h
  • xar-1.5.2/lib/darwinattr.c
  • xar-1.5.2/lib/darwinattr.h
  • xar-1.5.2/lib/data.c
  • xar-1.5.2/lib/data.h
  • xar-1.5.2/lib/ea.c
  • xar-1.5.2/lib/ea.h
  • xar-1.5.2/lib/err.c
  • xar-1.5.2/lib/ext2.c
  • xar-1.5.2/lib/ext2.h
  • xar-1.5.2/lib/fbsdattr.c
  • xar-1.5.2/lib/fbsdattr.h
  • xar-1.5.2/lib/filetree.c
  • xar-1.5.2/lib/filetree.h
  • xar-1.5.2/lib/hash.c
  • xar-1.5.2/lib/hash.h
  • xar-1.5.2/lib/io.c
  • xar-1.5.2/lib/io.h
  • xar-1.5.2/lib/libxar.la.in.in
  • xar-1.5.2/lib/linuxattr.c
  • xar-1.5.2/lib/linuxattr.h
  • xar-1.5.2/lib/macho.c
  • xar-1.5.2/lib/macho.h
  • xar-1.5.2/lib/script.c
  • xar-1.5.2/lib/script.h
  • xar-1.5.2/lib/signature.c
  • xar-1.5.2/lib/signature.h
  • xar-1.5.2/lib/stat.c
  • xar-1.5.2/lib/stat.h
  • xar-1.5.2/lib/subdoc.c
  • xar-1.5.2/lib/subdoc.h
  • xar-1.5.2/lib/util.c
  • xar-1.5.2/lib/util.h
  • xar-1.5.2/lib/zxar.c
  • xar-1.5.2/lib/zxar.h
  • xar-1.5.2/src/Makefile.inc.in
  • xar-1.5.2/src/xar.1
  • xar-1.5.2/src/xar.c
  • xar-1.5.2/test/attr
    .sh linux
  • xar-1.5.2/test/buffer.c
  • xar-1.5.2/test/checksums
    .sh linux
  • xar-1.5.2/test/compression
    .sh linux
  • xar-1.5.2/test/data
    .sh linux
  • xar-1.5.2/test/data.xsl
    .xml
  • xar-1.5.2/test/functions
  • xar-1.5.2/test/hardlink
    .sh linux
  • xar-1.5.2/test/heap
    .sh linux
  • xar-1.5.2/test/heap1.xsl
    .xml
  • xar-1.5.2/test/validate.c
  • xar-1.5.2/xar.spec.in
  • Empire-master/data/module_source/code_execution/Invoke-DllInjection.ps1
    .ps1
  • Empire-master/data/module_source/code_execution/Invoke-MetasploitPayload.ps1
    .ps1
  • Empire-master/data/module_source/code_execution/Invoke-Ntsd.ps1
    .ps1
  • Empire-master/data/module_source/code_execution/Invoke-ReflectivePEInjection.ps1
    .ps1
  • Empire-master/data/module_source/code_execution/Invoke-Shellcode.ps1
    .ps1
  • Empire-master/data/module_source/code_execution/Invoke-ShellcodeMSIL.ps1
    .ps1
  • Empire-master/data/module_source/code_execution/ntsd_x64.exe
    .exe windows:6 windows x64 arch:x64

    bdbbb8889a5c67d8216d3dc51e761965


    Code Sign

    Headers

    Imports

    Sections

  • Empire-master/data/module_source/code_execution/ntsd_x86.exe
    .exe windows:6 windows x86 arch:x86

    0626829e838975ff893651ab484f7bd3


    Code Sign

    Headers

    Imports

    Sections

  • Empire-master/data/module_source/code_execution/ntsdexts_x64.dll
    .dll windows:6 windows x64 arch:x64

    6ac313dddd8aa5c9e85a0780a9d94ce1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Empire-master/data/module_source/code_execution/ntsdexts_x86.dll
    .dll windows:6 windows x86 arch:x86

    358d1d75b422db069c0914f45f16894f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Empire-master/data/module_source/collection/Get-BrowserData.ps1
    .ps1
  • Empire-master/data/module_source/collection/Get-ChromeDump.ps1
    .ps1
  • Empire-master/data/module_source/collection/Get-ClipboardContents.ps1
    .ps1
  • Empire-master/data/module_source/collection/Get-FoxDump.ps1
    .ps1
  • Empire-master/data/module_source/collection/Get-IndexedItem.ps1
    .ps1
  • Empire-master/data/module_source/collection/Get-Keystrokes.ps1
    .ps1
  • Empire-master/data/module_source/collection/Get-SQLColumnSampleData.ps1
    .ps1
  • Empire-master/data/module_source/collection/Get-SQLQuery.ps1
    .ps1
  • Empire-master/data/module_source/collection/Get-Screenshot.ps1
    .ps1
  • Empire-master/data/module_source/collection/Get-USBKeystrokes.ps1
    .ps1
  • Empire-master/data/module_source/collection/Invoke-Inveigh.ps1
    .ps1
  • Empire-master/data/module_source/collection/Invoke-NetRipper.ps1
    .ps1
  • Empire-master/data/module_source/collection/Invoke-NinjaCopy.ps1
    .ps1
  • Empire-master/data/module_source/collection/Out-Minidump.ps1
    .ps1
  • Empire-master/data/module_source/collection/vaults/KeePassConfig.ps1
    .ps1
  • Empire-master/data/module_source/collection/vaults/KeeThief.ps1
    .ps1
  • Empire-master/data/module_source/credentials/Get-VaultCredential.ps1
    .ps1
  • Empire-master/data/module_source/credentials/Invoke-CredentialInjection.ps1
    .ps1
  • Empire-master/data/module_source/credentials/Invoke-DCSync.ps1
    .ps1
  • Empire-master/data/module_source/credentials/Invoke-Kerberoast.ps1
    .ps1
  • Empire-master/data/module_source/credentials/Invoke-Mimikatz.ps1
    .ps1
  • Empire-master/data/module_source/credentials/Invoke-PowerDump.ps1
    .ps1
  • Empire-master/data/module_source/credentials/Invoke-SessionGopher.ps1
    .ps1
  • Empire-master/data/module_source/credentials/Invoke-TokenManipulation.ps1
    .ps1
  • Empire-master/data/module_source/credentials/dumpCredStore.ps1
    .ps1
  • Empire-master/data/module_source/exfil/Invoke-EgressCheck.ps1
    .ps1
  • Empire-master/data/module_source/exfil/Invoke-ExfilDataToGitHub.ps1
    .ps1
  • Empire-master/data/module_source/exfil/Invoke-PostExfil.ps1
    .ps1
  • Empire-master/data/module_source/exploitation/Exploit-EternalBlue.ps1
    .ps1
  • Empire-master/data/module_source/exploitation/Exploit-JBoss.ps1
    .ps1
  • Empire-master/data/module_source/exploitation/Exploit-Jenkins.ps1
    .ps1
  • Empire-master/data/module_source/fun/Invoke-Thunderstruck.ps1
    .ps1
  • Empire-master/data/module_source/fun/Invoke-VoiceTroll.ps1
    .ps1
  • Empire-master/data/module_source/fun/Set-Wallpaper.ps1
    .ps1
  • Empire-master/data/module_source/lateral_movement/Invoke-DCOM.ps1
    .ps1
  • Empire-master/data/module_source/lateral_movement/Invoke-ExecuteMSBuild.ps1
    .ps1
  • Empire-master/data/module_source/lateral_movement/Invoke-InveighRelay.ps1
    .ps1
  • Empire-master/data/module_source/lateral_movement/Invoke-PsExec.ps1
    .ps1
  • Empire-master/data/module_source/lateral_movement/Invoke-SMBExec.ps1
    .ps1
  • Empire-master/data/module_source/lateral_movement/Invoke-SQLOSCmd.ps1
    .ps1
  • Empire-master/data/module_source/lateral_movement/Invoke-SSHCommand.ps1
    .ps1
  • Empire-master/data/module_source/management/Invoke-PSInject.ps1
    .ps1
  • Empire-master/data/module_source/management/Invoke-ReflectivePEInjection.ps1
    .ps1
  • Empire-master/data/module_source/management/Invoke-RunAs.ps1
    .ps1
  • Empire-master/data/module_source/management/Invoke-Vnc.ps1
    .ps1
  • Empire-master/data/module_source/management/MailRaider.ps1
    .ps1
  • Empire-master/data/module_source/management/New-HoneyHash.ps1
    .ps1
  • Empire-master/data/module_source/management/Set-MacAttribute.ps1
    .ps1
  • Empire-master/data/module_source/persistence/Get-SecurityPackages.ps1
    .ps1
  • Empire-master/data/module_source/persistence/Install-SSP.ps1
    .ps1
  • Empire-master/data/module_source/persistence/Invoke-BackdoorLNK.ps1
    .ps1
  • Empire-master/data/module_source/persistence/Persistence.psm1
    .ps1
  • Empire-master/data/module_source/persistence/PowerBreach.ps1
    .ps1
  • Empire-master/data/module_source/privesc/Get-GPPPassword.ps1
    .ps1
  • Empire-master/data/module_source/privesc/Get-SiteListPassword.ps1
    .ps1
  • Empire-master/data/module_source/privesc/Get-System.ps1
    .ps1
  • Empire-master/data/module_source/privesc/Invoke-BypassUAC.ps1
    .ps1
  • Empire-master/data/module_source/privesc/Invoke-BypassUACTokenManipulation.ps1
    .ps1
  • Empire-master/data/module_source/privesc/Invoke-EnvBypass.ps1
    .ps1
  • Empire-master/data/module_source/privesc/Invoke-EventVwrBypass.ps1
    .ps1
  • Empire-master/data/module_source/privesc/Invoke-FodHelperBypass.ps1
    .ps1
  • Empire-master/data/module_source/privesc/Invoke-MS16032.ps1
    .ps1
  • Empire-master/data/module_source/privesc/Invoke-MS16135.ps1
    .ps1
  • Empire-master/data/module_source/privesc/Invoke-SDCLTBypass.ps1
    .ps1
  • Empire-master/data/module_source/privesc/Invoke-Tater.ps1
    .ps1
  • Empire-master/data/module_source/privesc/Invoke-WScriptBypassUAC.ps1
    .ps1
  • Empire-master/data/module_source/privesc/PowerUp.ps1
    .ps1
  • Empire-master/data/module_source/python/lateral_movement/socks_source.py
  • Empire-master/data/module_source/recon/Find-Fruit.ps1
    .ps1
  • Empire-master/data/module_source/recon/Get-SQLServerLoginDefaultPw.ps1
    .ps1
  • Empire-master/data/module_source/recon/HTTP-Login.ps1
    .ps1
  • Empire-master/data/module_source/situational_awareness/host/Find-TrustedDocuments.ps1
    .ps1
  • Empire-master/data/module_source/situational_awareness/host/Get-ComputerDetails.ps1
    .ps1
  • Empire-master/data/module_source/situational_awareness/host/Get-SystemDNSServer.ps1
    .ps1
  • Empire-master/data/module_source/situational_awareness/host/Invoke-Paranoia.ps1
    .ps1
  • Empire-master/data/module_source/situational_awareness/host/Invoke-WinEnum.ps1
    .ps1
  • Empire-master/data/module_source/situational_awareness/host/Start-MonitorTCPConnections.ps1
    .ps1
  • Empire-master/data/module_source/situational_awareness/network/BloodHound.ps1
    .ps1
  • Empire-master/data/module_source/situational_awareness/network/Get-SPN.ps1
    .ps1
  • Empire-master/data/module_source/situational_awareness/network/Get-SQLInstanceDomain.ps1
    .ps1
  • Empire-master/data/module_source/situational_awareness/network/Get-SQLServerInfo.ps1
    .ps1
  • Empire-master/data/module_source/situational_awareness/network/Invoke-ARPScan.ps1
    .ps1
  • Empire-master/data/module_source/situational_awareness/network/Invoke-Portscan.ps1
    .ps1
  • Empire-master/data/module_source/situational_awareness/network/Invoke-ReverseDNSLookup.ps1
    .ps1
  • Empire-master/data/module_source/situational_awareness/network/Invoke-SMBAutoBrute.ps1
    .ps1
  • Empire-master/data/module_source/situational_awareness/network/Invoke-SmbScanner.ps1
    .ps1
  • Empire-master/data/module_source/situational_awareness/network/powerview.ps1
    .ps1
  • Empire-master/data/module_source/trollsploit/Get-RickAstley.ps1
    .ps1
  • Empire-master/data/obfuscated_module_source/code_execution/.gitignore
  • Empire-master/data/obfuscated_module_source/collection/.gitignore
  • Empire-master/data/obfuscated_module_source/collection/vaults/.gitignore
  • Empire-master/data/obfuscated_module_source/credentials/.gitignore
  • Empire-master/data/obfuscated_module_source/exfil/.gitignore
  • Empire-master/data/obfuscated_module_source/exploitation/.gitignore
  • Empire-master/data/obfuscated_module_source/fun/.gitignore
  • Empire-master/data/obfuscated_module_source/lateral_movement/.gitignore
  • Empire-master/data/obfuscated_module_source/management/.gitignore
  • Empire-master/data/obfuscated_module_source/persistence/.gitignore
  • Empire-master/data/obfuscated_module_source/privesc/.gitignore
  • Empire-master/data/obfuscated_module_source/recon/.gitignore
  • Empire-master/data/obfuscated_module_source/situational_awareness/.gitignore
  • Empire-master/data/obfuscated_module_source/situational_awareness/host/.gitignore
  • Empire-master/data/obfuscated_module_source/situational_awareness/network/.gitignore
  • Empire-master/data/obfuscated_module_source/trollsploit/.gitignore
  • Empire-master/data/profiles/comfoo.txt
  • Empire-master/data/profiles/fiesta.txt
  • Empire-master/data/profiles/pitty_tiger.txt
  • Empire-master/data/profiles/zeus.txt
  • Empire-master/empire
    .sh linux
  • Empire-master/lib/common/ShellcodeRDI.py
    .py .sh linux
  • Empire-master/lib/common/__init__.py
  • Empire-master/lib/common/agents.py
  • Empire-master/lib/common/credentials.py
  • Empire-master/lib/common/empire.py
  • Empire-master/lib/common/encryption.py
  • Empire-master/lib/common/events.py
  • Empire-master/lib/common/helpers.py
    .py .js
  • Empire-master/lib/common/http.py
  • Empire-master/lib/common/listeners.py
  • Empire-master/lib/common/messages.py
  • Empire-master/lib/common/modules.py
  • Empire-master/lib/common/obfuscation.py
  • Empire-master/lib/common/packets.py
  • Empire-master/lib/common/plugins.py
  • Empire-master/lib/common/pylnk.py
    .py .sh linux
  • Empire-master/lib/common/sRDI-License
  • Empire-master/lib/common/stagers.py
    .py .ps1
  • Empire-master/lib/common/templating.py
  • Empire-master/lib/listeners/dbx.py
    .py .ps1
  • Empire-master/lib/listeners/http.py
    .py .ps1
  • Empire-master/lib/listeners/http_com.py
    .py .ps1
  • Empire-master/lib/listeners/http_foreign.py
    .py .ps1
  • Empire-master/lib/listeners/http_hop.py
    .py .ps1
  • Empire-master/lib/listeners/http_mapi.py
    .py .ps1
  • Empire-master/lib/listeners/meterpreter.py
  • Empire-master/lib/listeners/onedrive.py
    .py .ps1
  • Empire-master/lib/listeners/redirector.py
    .py .ps1
  • Empire-master/lib/listeners/template.py
  • Empire-master/lib/modules/exfiltration/Invoke_ExfilDataToGitHub.py
  • Empire-master/lib/modules/external/generate_agent.py
  • Empire-master/lib/modules/powershell/code_execution/invoke_dllinjection.py
  • Empire-master/lib/modules/powershell/code_execution/invoke_metasploitpayload.py
  • Empire-master/lib/modules/powershell/code_execution/invoke_ntsd.py
  • Empire-master/lib/modules/powershell/code_execution/invoke_reflectivepeinjection.py
  • Empire-master/lib/modules/powershell/code_execution/invoke_shellcode.py
  • Empire-master/lib/modules/powershell/code_execution/invoke_shellcodemsil.py
  • Empire-master/lib/modules/powershell/collection/ChromeDump.py
  • Empire-master/lib/modules/powershell/collection/FoxDump.py
  • Empire-master/lib/modules/powershell/collection/USBKeylogger.py
  • Empire-master/lib/modules/powershell/collection/WebcamRecorder.py
    .py .ps1
  • Empire-master/lib/modules/powershell/collection/browser_data.py
  • Empire-master/lib/modules/powershell/collection/clipboard_monitor.py
  • Empire-master/lib/modules/powershell/collection/file_finder.py
  • Empire-master/lib/modules/powershell/collection/find_interesting_file.py
  • Empire-master/lib/modules/powershell/collection/get_indexed_item.py
    .py .ps1
  • Empire-master/lib/modules/powershell/collection/get_sql_column_sample_data.py
  • Empire-master/lib/modules/powershell/collection/get_sql_query.py
  • Empire-master/lib/modules/powershell/collection/inveigh.py
  • Empire-master/lib/modules/powershell/collection/keylogger.py
  • Empire-master/lib/modules/powershell/collection/minidump.py
  • Empire-master/lib/modules/powershell/collection/netripper.py
  • Empire-master/lib/modules/powershell/collection/ninjacopy.py
  • Empire-master/lib/modules/powershell/collection/packet_capture.py
  • Empire-master/lib/modules/powershell/collection/prompt.py
    .py .ps1
  • Empire-master/lib/modules/powershell/collection/screenshot.py
    .py .ps1
  • Empire-master/lib/modules/powershell/collection/vaults/add_keepass_config_trigger.py
  • Empire-master/lib/modules/powershell/collection/vaults/find_keepass_config.py
  • Empire-master/lib/modules/powershell/collection/vaults/get_keepass_config_trigger.py
  • Empire-master/lib/modules/powershell/collection/vaults/keethief.py
  • Empire-master/lib/modules/powershell/collection/vaults/remove_keepass_config_trigger.py
  • Empire-master/lib/modules/powershell/credentials/credential_injection.py
  • Empire-master/lib/modules/powershell/credentials/enum_cred_store.py
  • Empire-master/lib/modules/powershell/credentials/invoke_kerberoast.py
  • Empire-master/lib/modules/powershell/credentials/mimikatz/cache.py
  • Empire-master/lib/modules/powershell/credentials/mimikatz/certs.py
  • Empire-master/lib/modules/powershell/credentials/mimikatz/command.py
  • Empire-master/lib/modules/powershell/credentials/mimikatz/dcsync.py
  • Empire-master/lib/modules/powershell/credentials/mimikatz/dcsync_hashdump.py
  • Empire-master/lib/modules/powershell/credentials/mimikatz/extract_tickets.py
  • Empire-master/lib/modules/powershell/credentials/mimikatz/golden_ticket.py
  • Empire-master/lib/modules/powershell/credentials/mimikatz/keys.py
  • Empire-master/lib/modules/powershell/credentials/mimikatz/logonpasswords.py
  • Empire-master/lib/modules/powershell/credentials/mimikatz/lsadump.py
  • Empire-master/lib/modules/powershell/credentials/mimikatz/mimitokens.py
  • Empire-master/lib/modules/powershell/credentials/mimikatz/pth.py
  • Empire-master/lib/modules/powershell/credentials/mimikatz/purge.py
  • Empire-master/lib/modules/powershell/credentials/mimikatz/sam.py
  • Empire-master/lib/modules/powershell/credentials/mimikatz/silver_ticket.py
  • Empire-master/lib/modules/powershell/credentials/mimikatz/trust_keys.py
  • Empire-master/lib/modules/powershell/credentials/powerdump.py
  • Empire-master/lib/modules/powershell/credentials/sessiongopher.py
  • Empire-master/lib/modules/powershell/credentials/tokens.py
    .py .ps1
  • Empire-master/lib/modules/powershell/credentials/vault_credential.py
  • Empire-master/lib/modules/powershell/exfiltration/egresscheck.py
  • Empire-master/lib/modules/powershell/exfiltration/exfil_dropbox.py
    .py .ps1
  • Empire-master/lib/modules/powershell/exploitation/exploit_eternalblue.py
  • Empire-master/lib/modules/powershell/exploitation/exploit_jboss.py
  • Empire-master/lib/modules/powershell/exploitation/exploit_jenkins.py
  • Empire-master/lib/modules/powershell/lateral_movement/inveigh_relay.py
  • Empire-master/lib/modules/powershell/lateral_movement/invoke_dcom.py
  • Empire-master/lib/modules/powershell/lateral_movement/invoke_executemsbuild.py
  • Empire-master/lib/modules/powershell/lateral_movement/invoke_psexec.py
  • Empire-master/lib/modules/powershell/lateral_movement/invoke_psremoting.py
    .py .ps1
  • Empire-master/lib/modules/powershell/lateral_movement/invoke_smbexec.py
  • Empire-master/lib/modules/powershell/lateral_movement/invoke_sqloscmd.py
  • Empire-master/lib/modules/powershell/lateral_movement/invoke_sshcommand.py
  • Empire-master/lib/modules/powershell/lateral_movement/invoke_wmi.py
    .py .ps1
  • Empire-master/lib/modules/powershell/lateral_movement/invoke_wmi_debugger.py
    .py .ps1
  • Empire-master/lib/modules/powershell/lateral_movement/jenkins_script_console.py
  • Empire-master/lib/modules/powershell/lateral_movement/new_gpo_immediate_task.py
  • Empire-master/lib/modules/powershell/management/disable_rdp.py
  • Empire-master/lib/modules/powershell/management/downgrade_account.py
  • Empire-master/lib/modules/powershell/management/enable_multi_rdp.py
  • Empire-master/lib/modules/powershell/management/enable_rdp.py
  • Empire-master/lib/modules/powershell/management/get_domain_sid.py
  • Empire-master/lib/modules/powershell/management/honeyhash.py
  • Empire-master/lib/modules/powershell/management/invoke_script.py
  • Empire-master/lib/modules/powershell/management/lock.py
    .py .ps1
  • Empire-master/lib/modules/powershell/management/logoff.py
  • Empire-master/lib/modules/powershell/management/mailraider/disable_security.py
  • Empire-master/lib/modules/powershell/management/mailraider/get_emailitems.py
  • Empire-master/lib/modules/powershell/management/mailraider/get_subfolders.py
  • Empire-master/lib/modules/powershell/management/mailraider/mail_search.py
  • Empire-master/lib/modules/powershell/management/mailraider/search_gal.py
  • Empire-master/lib/modules/powershell/management/mailraider/send_mail.py
  • Empire-master/lib/modules/powershell/management/mailraider/view_email.py
  • Empire-master/lib/modules/powershell/management/psinject.py
  • Empire-master/lib/modules/powershell/management/reflective_inject.py
  • Empire-master/lib/modules/powershell/management/restart.py
  • Empire-master/lib/modules/powershell/management/runas.py
  • Empire-master/lib/modules/powershell/management/shinject.py
    .py .ps1
  • Empire-master/lib/modules/powershell/management/sid_to_user.py
  • Empire-master/lib/modules/powershell/management/spawn.py
  • Empire-master/lib/modules/powershell/management/spawnas.py
  • Empire-master/lib/modules/powershell/management/switch_listener.py
  • Empire-master/lib/modules/powershell/management/timestomp.py
  • Empire-master/lib/modules/powershell/management/user_to_sid.py
  • Empire-master/lib/modules/powershell/management/vnc.py
  • Empire-master/lib/modules/powershell/management/wdigest_downgrade.py
    .py .ps1
  • Empire-master/lib/modules/powershell/management/zipfolder.py
    .py .ps1
  • Empire-master/lib/modules/powershell/persistence/elevated/registry.py
  • Empire-master/lib/modules/powershell/persistence/elevated/schtasks.py
    .py .ps1
  • Empire-master/lib/modules/powershell/persistence/elevated/wmi.py
  • Empire-master/lib/modules/powershell/persistence/elevated/wmi_updater.py
  • Empire-master/lib/modules/powershell/persistence/misc/add_netuser.py
  • Empire-master/lib/modules/powershell/persistence/misc/add_sid_history.py
  • Empire-master/lib/modules/powershell/persistence/misc/debugger.py
    .py .ps1
  • Empire-master/lib/modules/powershell/persistence/misc/disable_machine_acct_change.py
  • Empire-master/lib/modules/powershell/persistence/misc/get_ssps.py
    .py .ps1
  • Empire-master/lib/modules/powershell/persistence/misc/install_ssp.py
    .py .ps1
  • Empire-master/lib/modules/powershell/persistence/misc/memssp.py
  • Empire-master/lib/modules/powershell/persistence/misc/skeleton_key.py
  • Empire-master/lib/modules/powershell/persistence/powerbreach/deaduser.py
    .py .ps1
  • Empire-master/lib/modules/powershell/persistence/powerbreach/eventlog.py
    .py .ps1
  • Empire-master/lib/modules/powershell/persistence/powerbreach/resolver.py
    .py .ps1
  • Empire-master/lib/modules/powershell/persistence/userland/backdoor_lnk.py
  • Empire-master/lib/modules/powershell/persistence/userland/registry.py
  • Empire-master/lib/modules/powershell/persistence/userland/schtasks.py
    .py .ps1
  • Empire-master/lib/modules/powershell/privesc/ask.py
    .py .ps1
  • Empire-master/lib/modules/powershell/privesc/bypassuac.py
  • Empire-master/lib/modules/powershell/privesc/bypassuac_env.py
  • Empire-master/lib/modules/powershell/privesc/bypassuac_eventvwr.py
  • Empire-master/lib/modules/powershell/privesc/bypassuac_fodhelper.py
  • Empire-master/lib/modules/powershell/privesc/bypassuac_sdctlbypass.py
  • Empire-master/lib/modules/powershell/privesc/bypassuac_tokenmanipulation.py
  • Empire-master/lib/modules/powershell/privesc/bypassuac_wscript.py
  • Empire-master/lib/modules/powershell/privesc/getsystem.py
  • Empire-master/lib/modules/powershell/privesc/gpp.py
  • Empire-master/lib/modules/powershell/privesc/mcafee_sitelist.py
  • Empire-master/lib/modules/powershell/privesc/ms16-032.py
  • Empire-master/lib/modules/powershell/privesc/ms16-135.py
  • Empire-master/lib/modules/powershell/privesc/powerup/allchecks.py
  • Empire-master/lib/modules/powershell/privesc/powerup/find_dllhijack.py
  • Empire-master/lib/modules/powershell/privesc/powerup/service_exe_restore.py
  • Empire-master/lib/modules/powershell/privesc/powerup/service_exe_stager.py
  • Empire-master/lib/modules/powershell/privesc/powerup/service_exe_useradd.py
  • Empire-master/lib/modules/powershell/privesc/powerup/service_stager.py
  • Empire-master/lib/modules/powershell/privesc/powerup/service_useradd.py
  • Empire-master/lib/modules/powershell/privesc/powerup/write_dllhijacker.py
  • Empire-master/lib/modules/powershell/privesc/tater.py
  • Empire-master/lib/modules/powershell/recon/find_fruit.py
  • Empire-master/lib/modules/powershell/recon/get_sql_server_login_default_pw.py
  • Empire-master/lib/modules/powershell/recon/http_login.py
  • Empire-master/lib/modules/powershell/situational_awareness/host/antivirusproduct.py
    .py .ps1
  • Empire-master/lib/modules/powershell/situational_awareness/host/computerdetails.py
  • Empire-master/lib/modules/powershell/situational_awareness/host/dnsserver.py
    .py .ps1
  • Empire-master/lib/modules/powershell/situational_awareness/host/findtrusteddocuments.py
  • Empire-master/lib/modules/powershell/situational_awareness/host/get_pathacl.py
  • Empire-master/lib/modules/powershell/situational_awareness/host/get_proxy.py
  • Empire-master/lib/modules/powershell/situational_awareness/host/get_uaclevel.py
    .py .ps1
  • Empire-master/lib/modules/powershell/situational_awareness/host/monitortcpconnections.py
  • Empire-master/lib/modules/powershell/situational_awareness/host/paranoia.py
  • Empire-master/lib/modules/powershell/situational_awareness/host/winenum.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/arpscan.py
    .py .ps1
  • Empire-master/lib/modules/powershell/situational_awareness/network/bloodhound.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/get_exploitable_system.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/get_spn.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/get_sql_instance_domain.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/get_sql_server_info.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/portscan.py
    .py .ps1
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/find_foreign_group.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/find_foreign_user.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/find_gpo_computer_admin.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/find_gpo_location.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/find_localadmin_access.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/find_managed_security_group.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/get_cached_rdpconnection.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/get_computer.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/get_dfs_share.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/get_domain_controller.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/get_domain_policy.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/get_domain_trust.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/get_fileserver.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/get_forest.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/get_forest_domain.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/get_gpo.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/get_group.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/get_group_member.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/get_localgroup.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/get_loggedon.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/get_object_acl.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/get_ou.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/get_rdp_session.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/get_session.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/get_site.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/get_subnet.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/get_user.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/map_domain_trust.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/process_hunter.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/set_ad_object.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/share_finder.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/powerview/user_hunter.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/reverse_dns.py
    .py .ps1
  • Empire-master/lib/modules/powershell/situational_awareness/network/smbautobrute.py
  • Empire-master/lib/modules/powershell/situational_awareness/network/smbscanner.py
  • Empire-master/lib/modules/powershell/trollsploit/get_schwifty.py
    .py .ps1
  • Empire-master/lib/modules/powershell/trollsploit/message.py
    .py .ps1
  • Empire-master/lib/modules/powershell/trollsploit/process_killer.py
    .py .ps1
  • Empire-master/lib/modules/powershell/trollsploit/rick_ascii.py
    .py .ps1
  • Empire-master/lib/modules/powershell/trollsploit/rick_astley.py
  • Empire-master/lib/modules/powershell/trollsploit/thunderstruck.py
    .py .ps1
  • Empire-master/lib/modules/powershell/trollsploit/voicetroll.py
    .py .ps1
  • Empire-master/lib/modules/powershell/trollsploit/wallpaper.py
    .py .ps1
  • Empire-master/lib/modules/powershell/trollsploit/wlmdr.py
    .py .ps1
  • Empire-master/lib/modules/powershell_template.py
    .py .ps1
  • Empire-master/lib/modules/python/collection/linux/hashdump.py
  • Empire-master/lib/modules/python/collection/linux/keylogger.py
    .py .js
  • Empire-master/lib/modules/python/collection/linux/mimipenguin.py
  • Empire-master/lib/modules/python/collection/linux/pillage_user.py
  • Empire-master/lib/modules/python/collection/linux/sniffer.py
  • Empire-master/lib/modules/python/collection/linux/xkeylogger.py
  • Empire-master/lib/modules/python/collection/osx/browser_dump.py
  • Empire-master/lib/modules/python/collection/osx/clipboard.py
  • Empire-master/lib/modules/python/collection/osx/hashdump.py
  • Empire-master/lib/modules/python/collection/osx/imessage_dump.py
    .py .sh linux
  • Empire-master/lib/modules/python/collection/osx/kerberosdump.py
  • Empire-master/lib/modules/python/collection/osx/keychaindump.py
  • Empire-master/lib/modules/python/collection/osx/keychaindump_chainbreaker.py
  • Empire-master/lib/modules/python/collection/osx/keychaindump_decrypt.py
  • Empire-master/lib/modules/python/collection/osx/keylogger.py
    .py .js
  • Empire-master/lib/modules/python/collection/osx/native_screenshot.py
  • Empire-master/lib/modules/python/collection/osx/native_screenshot_mss.py
  • Empire-master/lib/modules/python/collection/osx/osx_mic_record.py
  • Empire-master/lib/modules/python/collection/osx/pillage_user.py
  • Empire-master/lib/modules/python/collection/osx/prompt.py
  • Empire-master/lib/modules/python/collection/osx/screensaver_alleyoop.py
  • Empire-master/lib/modules/python/collection/osx/screenshot.py
  • Empire-master/lib/modules/python/collection/osx/search_email.py
  • Empire-master/lib/modules/python/collection/osx/sniffer.py
    .py .sh linux
  • Empire-master/lib/modules/python/collection/osx/webcam.py
  • Empire-master/lib/modules/python/exploit/web/jboss_jmx.py
  • Empire-master/lib/modules/python/lateral_movement/multi/ssh_command.py
  • Empire-master/lib/modules/python/lateral_movement/multi/ssh_launcher.py
  • Empire-master/lib/modules/python/management/multi/kerberos_inject.py
  • Empire-master/lib/modules/python/management/multi/socks.py
  • Empire-master/lib/modules/python/management/multi/spawn.py
  • Empire-master/lib/modules/python/management/osx/screen_sharing.py
  • Empire-master/lib/modules/python/management/osx/shellcodeinject64.py
  • Empire-master/lib/modules/python/persistence/multi/crontab.py
  • Empire-master/lib/modules/python/persistence/multi/desktopfile.py
  • Empire-master/lib/modules/python/persistence/osx/CreateHijacker.py
  • Empire-master/lib/modules/python/persistence/osx/LaunchAgentUserLandPersistence.py
  • Empire-master/lib/modules/python/persistence/osx/RemoveDaemon.py
  • Empire-master/lib/modules/python/persistence/osx/launchdaemonexecutable.py
  • Empire-master/lib/modules/python/persistence/osx/loginhook.py
  • Empire-master/lib/modules/python/persistence/osx/mail.py
  • Empire-master/lib/modules/python/privesc/linux/linux_priv_checker.py
    .py .vbs
  • Empire-master/lib/modules/python/privesc/linux/unix_privesc_check.py
  • Empire-master/lib/modules/python/privesc/multi/bashdoor.py
  • Empire-master/lib/modules/python/privesc/multi/sudo_spawn.py
  • Empire-master/lib/modules/python/privesc/osx/dyld_print_to_file.py
  • Empire-master/lib/modules/python/privesc/osx/piggyback.py
  • Empire-master/lib/modules/python/privesc/windows/get_gpppasswords.py
  • Empire-master/lib/modules/python/situational_awareness/host/multi/SuidGuidSearch.py
  • Empire-master/lib/modules/python/situational_awareness/host/multi/WorldWriteableFileSearch.py
  • Empire-master/lib/modules/python/situational_awareness/host/osx/HijackScanner.py
  • Empire-master/lib/modules/python/situational_awareness/host/osx/situational_awareness.py
    .py .sh linux
  • Empire-master/lib/modules/python/situational_awareness/network/active_directory/dscl_get_groupmembers.py
  • Empire-master/lib/modules/python/situational_awareness/network/active_directory/dscl_get_groups.py
  • Empire-master/lib/modules/python/situational_awareness/network/active_directory/dscl_get_users.py
  • Empire-master/lib/modules/python/situational_awareness/network/active_directory/get_computers.py
  • Empire-master/lib/modules/python/situational_awareness/network/active_directory/get_domaincontrollers.py
  • Empire-master/lib/modules/python/situational_awareness/network/active_directory/get_fileservers.py
  • Empire-master/lib/modules/python/situational_awareness/network/active_directory/get_groupmembers.py
  • Empire-master/lib/modules/python/situational_awareness/network/active_directory/get_groupmemberships.py
  • Empire-master/lib/modules/python/situational_awareness/network/active_directory/get_groups.py
  • Empire-master/lib/modules/python/situational_awareness/network/active_directory/get_ous.py
  • Empire-master/lib/modules/python/situational_awareness/network/active_directory/get_userinformation.py
  • Empire-master/lib/modules/python/situational_awareness/network/active_directory/get_users.py
  • Empire-master/lib/modules/python/situational_awareness/network/dcos/chronos_api_add_job.py
  • Empire-master/lib/modules/python/situational_awareness/network/dcos/chronos_api_delete_job.py
  • Empire-master/lib/modules/python/situational_awareness/network/dcos/chronos_api_start_job.py
  • Empire-master/lib/modules/python/situational_awareness/network/dcos/etcd_crawler.py
  • Empire-master/lib/modules/python/situational_awareness/network/dcos/marathon_api_create_start_app.py
  • Empire-master/lib/modules/python/situational_awareness/network/dcos/marathon_api_delete_app.py
  • Empire-master/lib/modules/python/situational_awareness/network/find_fruit.py
  • Empire-master/lib/modules/python/situational_awareness/network/gethostbyname.py
  • Empire-master/lib/modules/python/situational_awareness/network/http_rest_api.py
  • Empire-master/lib/modules/python/situational_awareness/network/port_scan.py
    .py .js
  • Empire-master/lib/modules/python/situational_awareness/network/smb_mount.py
  • Empire-master/lib/modules/python/trollsploit/osx/change_background.py
  • Empire-master/lib/modules/python/trollsploit/osx/login_message.py
  • Empire-master/lib/modules/python/trollsploit/osx/say.py
  • Empire-master/lib/modules/python/trollsploit/osx/thunderstruck.py
  • Empire-master/lib/modules/python_jobs_template.py
  • Empire-master/lib/modules/python_template.py
  • Empire-master/lib/powershell/Invoke-Obfuscation/Invoke-Obfuscation.ps1
    .ps1
  • Empire-master/lib/powershell/Invoke-Obfuscation/Invoke-Obfuscation.psd1
  • Empire-master/lib/powershell/Invoke-Obfuscation/Invoke-Obfuscation.psm1
    .ps1
  • Empire-master/lib/powershell/Invoke-Obfuscation/LICENSE
  • Empire-master/lib/powershell/Invoke-Obfuscation/Out-EncodedAsciiCommand.ps1
    .ps1
  • Empire-master/lib/powershell/Invoke-Obfuscation/Out-EncodedBXORCommand.ps1
    .ps1
  • Empire-master/lib/powershell/Invoke-Obfuscation/Out-EncodedBinaryCommand.ps1
    .ps1
  • Empire-master/lib/powershell/Invoke-Obfuscation/Out-EncodedHexCommand.ps1
    .ps1
  • Empire-master/lib/powershell/Invoke-Obfuscation/Out-EncodedOctalCommand.ps1
    .ps1
  • Empire-master/lib/powershell/Invoke-Obfuscation/Out-EncodedSpecialCharOnlyCommand.ps1
    .ps1
  • Empire-master/lib/powershell/Invoke-Obfuscation/Out-EncodedWhitespaceCommand.ps1
    .ps1
  • Empire-master/lib/powershell/Invoke-Obfuscation/Out-ObfuscatedStringCommand.ps1
    .ps1
  • Empire-master/lib/powershell/Invoke-Obfuscation/Out-ObfuscatedTokenCommand.ps1
    .ps1
  • Empire-master/lib/powershell/Invoke-Obfuscation/Out-PowerShellLauncher.ps1
    .ps1
  • Empire-master/lib/powershell/Invoke-Obfuscation/Out-SecureStringCommand.ps1
    .ps1
  • Empire-master/lib/powershell/Invoke-Obfuscation/README.md
  • Empire-master/lib/stagers/multi/bash.py
  • Empire-master/lib/stagers/multi/launcher.py
  • Empire-master/lib/stagers/multi/macro.py
    .py .vbs
  • Empire-master/lib/stagers/multi/pyinstaller.py
  • Empire-master/lib/stagers/multi/war.py
  • Empire-master/lib/stagers/osx/applescript.py
  • Empire-master/lib/stagers/osx/application.py
  • Empire-master/lib/stagers/osx/ducky.py
  • Empire-master/lib/stagers/osx/dylib.py
  • Empire-master/lib/stagers/osx/jar.py
  • Empire-master/lib/stagers/osx/launcher.py
  • Empire-master/lib/stagers/osx/macho.py
  • Empire-master/lib/stagers/osx/macro.py
    .py .vbs
  • Empire-master/lib/stagers/osx/pkg.py
  • Empire-master/lib/stagers/osx/safari_launcher.py
    .py .js
  • Empire-master/lib/stagers/osx/teensy.py
  • Empire-master/lib/stagers/windows/backdoorLnkMacro.py
    .py .ps1
  • Empire-master/lib/stagers/windows/bunny.py
  • Empire-master/lib/stagers/windows/csharp_exe.py
  • Empire-master/lib/stagers/windows/dll.py
  • Empire-master/lib/stagers/windows/ducky.py
  • Empire-master/lib/stagers/windows/hta.py
  • Empire-master/lib/stagers/windows/launcher_bat.py
  • Empire-master/lib/stagers/windows/launcher_lnk.py
  • Empire-master/lib/stagers/windows/launcher_sct.py
  • Empire-master/lib/stagers/windows/launcher_vbs.py
    .py .vbs
  • Empire-master/lib/stagers/windows/launcher_xml.py
    .py .ps1
  • Empire-master/lib/stagers/windows/macro.py
  • Empire-master/lib/stagers/windows/macroless_msword.py
  • Empire-master/lib/stagers/windows/shellcode.py
  • Empire-master/lib/stagers/windows/teensy.py
  • Empire-master/plugins/example.py
  • Empire-master/setup/cert.sh
    .sh linux
  • Empire-master/setup/install.sh
    .sh linux
  • Empire-master/setup/requirements.txt
  • Empire-master/setup/reset.sh
    .sh linux
  • Empire-master/setup/setup_database.py
    .py .sh linux