Empire v3.6.3

Beginning with Empire 3.5.0, we recommend the use of Poetry or the Docker images to run Empire as we will be transitioning to these platforms.

Changelog

• Added save path to download file message - #414 (@meldridge)
• Updated installation file formatting - #410 (@Pernat1y)
• Fixed python 3.9.1 issue with deprecated base64 function - #422 (@brimstone)
• Fixed dump creds and hash not being logged in credentials properly - #423 (@Cx01N)

Empire v3.6.2

Beginning with Empire 3.5.0, we recommend the use of Poetry or the Docker images to run Empire as we will be transitioning to these platforms.

Changelog

• Added python support for HTTP malleable listener - #404 (@adamczi)
• Added new admin menu API endpoints - #403 (@vinnybod, @Cx01N)
• Added chat server for Starkiller and new Empire CLI integration - #403 (@vinnybod, @Cx01N)
• Added module PrivescCheck - #401 (@Invoke-Mimikatz)
• Fixed error in malleable profiles when http-stager is not defined - #407 (@Cx01N)

Empire v3.6.1

Beginning with Empire 3.5.0, we recommend the use of Poetry or the Docker images to run Empire as we will be transitioning to these platforms.

Changelog

• Added editable wiki and sync option to repo - #398 (@Cx01N)
• Fixed byte error in python/collection/osx/prompt - #396 (@Cx01N)
• Fixed clear option issue for malleable listener - #393 (@Cx01N)
• Added update_comms, killdate, and workinghours endpoints - #399 (@Cx01N)

Empire v3.6.0

Beginning with Empire 3.5.0, we recommend the use of Poetry or the Docker images to run Empire as we will be transitioning to these platforms.

Changelog

• Added new API endpoints for user and agent notes - #383 (@Cx01N)
• Added (readded) PowerView function add-netuser - #381 (@Cx01N)
• Added Invoke-SharpChisel module - #368 (@Invoke-Mimikatz)
• Added command option to psremoting and smbexec - #380 (@Invoke-Mimikatz)
• Added option to use multiple redirector listeners and chaining - #389 (@Cx01N)
• Added Invoke-Assembly module - #376 (@Invoke-Mimikatz)
• Updated API endpoints for dynamic plugin calls - #383 (@Cx01N)
• Updated plugin and module templates - #384 (@Cx01N)
• Fixed smbscanner to work on Windows 10 - #380 (@Invoke-Mimikatz)
• Fixed update agent comms (updatecomms) not properly changing - #382 (@Cx01N)
• Fixed download endpoint formatting and error handling - #383 (@Cx01N)
• Fixed issue with passing arguments to Get-DomainSID module - #374 (@mjokic)
• Fixed bat file length limit issue - #385 (@Hubbl3)

Empire v3.5.2

Beginning with Empire 3.5.0, we recommend the use of Poetry or the Docker images to run Empire as we will be transitioning to these platforms.

Changelog

• Fixed token manipulation (steal_token) functionality in Windows 10 - #355 (@Hubbl3)
• Fixed lateral movement module New-GPOImmediateTask - #362 (@Cx01N)
• Fixed Invoke-PSRemoting blocking current agent - #359 (@mjokic)

Empire v3.5.1

Beginning with Empire 3.5.0, we recommend the use of Poetry or the Docker images to run Empire as we will be transitioning to these platforms.

Changelog

• Fixed Invoke-Obfuscation in Kali/Dockers - #348 (@Cx01N)
• Refactored /api/map endpoint - #337 (@mattaereal)

Empire v3.5.0

Beginning with Empire 3.5.0, we recommend the use of Poetry or the Docker images to run Empire as we will be transitioning to these platforms.

Changelog

• Added real-time notifications to Starkiller - #335 (@vinnybod)
• Added Invoke-ZeroLogon - #333 (@Cx01N)
• Added Invoke-SocksProxy - #332 (@Cx01N, @Hubbl3)
• Added powercat module - #319 (@Cx01N)
• Added powermad modules - #329 (@snovvcrash)
• Added self cleanup functionality to plugins - #332 (@Hubbl3)
• Updated Mimikatz 2.2.0 20200918 ZeroLogon - #330 (@Cx01N)
• Fixed dropbox listener and staging issues - #327 (@Cx01N)
• Fixed docker missing pyparsing in requirements.txt - #324 (@Cx01N)
• Fixed modules with missing MITRE ATT&CK techniques - #321 (@Cx01N)
• Fixed issue with inputs not being assigned color in helpers.py - #332 (@Cx01N)

v3.4.0

Empire 3.4.0

• Added Malleable C2 HTTP Listener - #287 (@johneiser, @Cx01N, @Hubbl3)
• Added reflective load ability for files - #309 (@Hubbl3)
• Added Invoke-DomainPasswordSpray - #295 (@Cx01N)
• Added Invoke-WinPEAS - #293 (@Cx01N)
• Added Invoke-Watson - #294 (@Cx01N)
• Added plugins being loaded at startup - #301 (@Cx01N)
• Updated moduleName to display full directory - #299 (@Cx01N)
• Updated info in Invoke-SMBExec to indicate single target - #286 (@Cx01N)
• Updated Slack API notifications to webhooks - #303 (@Cx01N)
• Fixed spaces for IIS default page in HTTP listener - #302 (@adamczi)
• Fixed agent spawning issue with MS-16-032 - #292 (@Cx01N)
• Fixed min language version for modules (@Cx01N)
• Fixed CLI stager incorrectly shutting down - #198 (@Cx01N)
• Fixed error message from active agents during shutdown - #308 (@Cx01N)

v3.4.0-RC2

Empire 3.4.0-RC2

• Added Malleable C2 HTTP Listener - #287 (@johneiser, @Cx01N, @Hubbl3)
• Added Invoke-DomainPasswordSpray - #295 (@Cx01N)
• Added Invoke-WinPEAS - #293 (@Cx01N)
• Added Invoke-Watson - #294 (@Cx01N)
• Added plugins being loaded at startup - #301 (@Cx01N)
• Fixed agent spawning issue with MS-16-032 - #292 (@Cx01N)
• Fixed min language version for modules (@Cx01N)
• Fixed CLI stager incorrectly shutting down - #198 (@Cx01N)
• Updated moduleName to display full directory - #299 (@Cx01N)
• Updated info in Invoke-SMBExec to indicate single target - #286 (@Cx01N)

v3.4.0-RC1

Empire 3.4.0-RC1

• Added Malleable C2 HTTP Listener - #287 (@johneiser, @Cx01N, @Hubbl3)
• Added Invoke-DomainPasswordSpray - #295 (@Cx01N)
• Added Invoke-WinPEAS - #293 (@Cx01N)
• Added Invoke-Watson - #294 (@Cx01N)
• Fixed agent spawning issue with MS-16-032 - #292 (@Cx01N)
• Fixed min language version for modules (@Cx01N)

Note: Confirmed working Malleable C2 Profiles can be found here.