Sleight

Sleight Script de configuración del redirector C2 HTTPS para Empire. Uso: Sleight puede usarse de 3 maneras: 1 Configurar redirector HTTP: 1. Ejecute Sleight y proporciónele un perfil de comunicación de Empire. 2. Introduzca la dirección IP y el puerto de escucha de su C2 de Empire. 3. Diga «no» ...

Empire

Empire Empire es un framework de post-explotación y emulación de adversarios que se utiliza para ayudar a los Red Teams y a los Penetration Testers. El servidor de Empire está escrito en Python 3 y es modular para permitir flexibilidad al operador. Empire viene integrado con un cliente que puede...

Empire-GUI

PostCSS PostCSS 是一个允许使用 JS 插件转换样式的工具。 这些插件可以检查（lint）你的 CSS，支持 CSS Variables 和 Mixins， 编译尚未被浏览器广泛支持的先进的 CSS 语法，内联图片，以及其它很多优秀的功能。 PostCSS 在工业界被广泛地应用，其中不乏很多有名的行业领导者，如：维基百科，Twitter，阿里巴巴， JetBrains。PostCSS 的 Autoprefixer 插件是最流行的 CSS 处理工具之一。 Twitter 账号: @postcss。 支持 / 讨论: Gitter。 如果需要 PostCSS...

zuthaka

A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs » · Report Bug · Request Feature · Table of Contents 1. About The Project Problem statement Solution Built With 2. Already...

bothan

bothan Confirma que una ip:port está alojando Empire. Soporte futuro para otros C2s. Uso Direct single query ❯❯ bothan -v localhost:8080 DEBU2020-01-19T20:25:02-05:00 Requesting... host="localhost:8080" INFO2020-01-19T20:25:02-05:00 SUCCESS host="http://localhost:8080" tool=empire Take a...

CVE-2017-0213

CVE-2017-0213 Usé el código proporcionado por el equipo de Google Project Zero aquí: https://github.com/WindowsExploits/Exploits/tree/master/CVE-2017-0213 Los cambios que hice permiten que el programa llame a un oneliner de PowerShell que me dará un agente de Empire en el objetivo. Lo usaré para...

NorkNork

NorkNork - 用于识别 Empire 持久化后门的工具 https://www.n00py.io/2017/01/removing-backdoors-powershell-empire-edition/ 关于： 此脚本设计用于在 Windows 系统上识别 Powershell Empire 持久化后门。 目前支持检查以下持久化方法： 计划任务 自动运行 WMI 订阅 安全支持提供程序 轻松访问中心后门 计算机账户密码禁用 安装： 你可以使用 Python 2.7 运行此脚本，或下载 pyinstaller 编译的可执行文件。在 PowerShell 窗口中运行二进制文件或脚本...

AutoTTP

AutoTTP 自动化战术、技术与程序（Automated Tactics Techniques & Procedures）。对于回归测试、产品评估、为研究人员生成数据等用途，重复手动执行复杂序列可能会很繁琐。我尝试了使用像 Visual Studio Code（或类似）的 IDE 来更轻松地编写 Empire（或任何提供 API 的框架/产品/工具包，如 Metasploit RPC、Cobalt-Strike 等）的脚本。于是我开始设计 AutoTTP。这仍然是一个进行中的工作。 使用 Empire 2.2 测试。 Youtube - 概览与精选技术深度解析 什么是 TTP？...

CVE-2017-11882

CVE-2017-11882 Empire 移植版 CVE-2017-11882 代码已移至另一个父仓库。重定向？...

CVE-2026-92748

BC Security Empire before 6.7.1 fails to validate the multipart filename parameter in upload endpoints, allowing authenticated operators to write files to arbitrary paths on the C2 server. Attackers can use path traversal sequences in the filename to bypass directory containment and write malicio...

CVE-2026-92748 BC Security Empire before 6.7.1 Path Traversal File Upload RCE

BC Security Empire before 6.7.1 fails to validate the multipart filename parameter in upload endpoints, allowing authenticated operators to write files to arbitrary paths on the C2 server. Attackers can use path traversal sequences in the filename to bypass directory containment and write malicio...

CVE-2026-92748 BC Security Empire before 6.7.1 Path Traversal File Upload RCE

BC Security Empire before 6.7.1 fails to validate the multipart filename parameter in upload endpoints, allowing authenticated operators to write files to arbitrary paths on the C2 server. Attackers can use path traversal sequences in the filename to bypass directory containment and write malicio...

EUVD-2026-81020

BC Security Empire before 6.7.1 fails to validate the multipart filename parameter in upload endpoints, allowing authenticated operators to write files to arbitrary paths on the C2 server. Attackers can use path traversal sequences in the filename to bypass directory containment and write malicio...

CVE-2026-92748 BC Security Empire before 6.7.1 Path Traversal File Upload RCE

BC Security Empire before 6.7.1 fails to validate the multipart filename parameter in upload endpoints, allowing authenticated operators to write files to arbitrary paths on the C2 server. Attackers can use path traversal sequences in the filename to bypass directory containment and write malicio...

CVE-2026-92748

BC Security Empire before version 6.7.1 contains a path traversal vulnerability in its upload endpoints. The root cause is a failure to validate the multipart filename parameter , allowing authenticated operators to use path traversal sequences to write files to arbitrary locations on the C2 serv...

CVE-2026-92748: Improper Limitation of a Pathname to a Restricted Directory

BC Security Empire before 6.7.1 fails to validate the multipart filename parameter in upload endpoints, allowing authenticated operators to write files to arbitrary paths on the C2 server. Attackers can use path traversal sequences in the filename to bypass directory containment and write malicio...

Empire v7.0.2

Empire Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers. The Empire server is written in Python 3 and is modular to allow operator flexibility. Empire comes built-in with a client that can be used remotely to access the server...

Starkiller v4.0.3

Starkiller Starkiller is a Frontend for Powershell Empire. It is a web application written in VueJS. If you'd like to contribute please follow the Contribution guide. If you'd like to request a feature or report a bug, please follow the Issue template. Getting Started As of Empire 5.0 and...

zuixingongju-resources

zuixingongju-resources HW Red Team Arsenal – Resource fil...

autottp

This is a Python wrapper for the PowerShell Empire API, a framework for penetration testing and red teaming. The wrapper provides a simple interface to interact with the Empire API, allowing users to automate tasks and sequences of actions. The wrapper is feature complete as of Empire 1.5.0 and...