Friday, March 10, 2017

EmpirePanel : Hack with Friends!

Intro:

You may be familiar with what was once called "PowerShell Empire", and is now referred to simply as "Empire".  It's the hot new post-exploitation framework with a lot of fancy features.  One major drawback, however, is that Empire lacks any real multiplayer support.  I noticed that Empire is, at its core, a Flask app, so why the hell not extend it into a fully functional web interface for collaborative hacking?


Goals:

  • A nice, pretty, web interface for Empire
  • Mulitplayer support
  • Functional parity with command line version
  • Minimal invasiveness to the existing Empire code base


High Level Architecture:

EmpirePanel is based on AdminLTE, and is decorated with AngularJS.  It is implemented entirely in HTML and JavaScript except for a minor tweak to enable the new routes in the core Empire code.  All interaction with Empire is done with JavaScript via the provided Empire API.


Walkthrough:

git clone https://github.com/pierce403/EmpirePanel.git
cd EmpirePanel/setup/
./setup_database.sh
./cert.sh
cd ..
./empire --rest --username admin --password admin

Then from a browser, visit https://127.0.0.1:1337/, and log in with the user/pass you set.

You should then be presented with a page looking like this:


Awesome, now lets start hacking.  First we need to create a listener.  I'm using 192.168.174.1 for this listener because that's the IP for my vmware host.


Great.  Now once we have the listener, we click into it, and generate a launcher:


This launcher is the command we run on our target system.  Once we run it, we see an agent pop up.



Okay, let's click into it and see what sorts of things we can do :





Things That Work:

  • Creating and destroying listeners
  • Generating a launchers
  • Collecting agents
  • Running shell commands on agents
  • Running modules on agents

Things That Don't Work Yet:

  • Some agent commands, like rename, ps, etc
  • UI layout consistency
  • AngularJS syncing issues

Fixing Things That Don't Work:

Of course, everything is on github (https://github.com/pierce403/EmpirePanel) and I accept pull requests.  All of my EmpirePanel work is concentrated on two files, empire.js, and index.html in the /static/ directory.

Future Plans:

This demo is only compatible with the 1.5 version of Empire.  Hopefully the API for 2.0 will stabilize soon and I'll be able to port it over, and hopefully, one day get the code upstream.  Maybe this work will simply inspire someone who knows what they're doing to come along and do it all the right way, who knows?  I guess that's all part of the magic of Open Source.  Enjoy!

59 comments:

  1. شركة تنظيف
    تهتم شركة قمم التميز باعمال وخدمات التنظيف فى اى مكان فى تنظيف الشقق – البيوت – شركة تنظيف منازل بالجبيل
    – المصانع واى مكان يحتاج الى اعمال التنظيف من اجل ان تساعد فى الوصول الى افضل ما تجدة من نتائج مميزة
    تنظيف يحتاج للاشياء معقدة من الادوات ، مثل الغرف المنزل لها ادوات التنظيف الخاصة، الصالون المدهب يحتاج لمنظف الخاص ، وسطح فى المنزل يتطلب مواد متخلفة ، فكثير من المنظفات المطلوبة حتى تكون عملية التنظيف سهلة ومن المنظفات : مبيض التواليت ، منظف الحمام، المطهرات ، المنظف للنوافذ والارضيات والغسيل ، سائل الغسيل و اعمال المنزل الصغيرة يمكن انجازاها بفوطة جافة ومنظف جيد ، المنظف المصنوع بقل الامكنيات ، معلقتين من الخل الابيض مع لتر من الماء الساخن وضعهم فى بخاخة . بيكربونات الصوديم لتنظيف البلاط يمكن مزج ثلاثه اجزاء من الماء الساخن مع جزء من الصودا لتنطيف الفرن والثلاجة ، وبيكربونات الصوديم بقليل من سائل الجلى يتكون معجون سميك صالح لتنظيف الحمام ، يمكن استخدام بيكربونات الصوديم وضعه فى صحن صغير ولطرد الروائح الكريهة من الثلاجة ، كربونات الصوديم فعالة فى ازالة البقع الدهنية لانها قلوية ويجب لبس قفازات لاستخدامها .
    شركة تنظيف بيارات بالقطيف
    الخل الابيض وعصير الليمون يمكن تنظيف السطوح الزجاجية والخشبية المصقولة ، ويمكن استخدام الخل الابيض والليمون للتخلص من الروائح الكريهة والتعطير .
    عند التنظيف يجب لبس القفازات لحماية الايدى من المواد المنظفه ، ويمكن لبس الفقازات عند غسيل الصحون وتكون مخصص لعمل فى المطبخ .
    شركة شفط بيارات بالقطيف
    والمنزل النظيفة من غير فوضوى أجمل بكثير وافضل ،وإذا توفر جميع الادوات النظافة داخل بيت تكون عمليه النظافة سهلة ،
    للتنظيف المنزل من اعلى الى اسفل ، اى تنظيف الغبار من اعلى الى اسفل ويمكن استخدام الاجهزة الكهربائية فى عملية التنظيف . شركة نقل اثاث بالجبيل
    تنظيف النوافذ باستخدام قطعة قطنية فى مسح الزجاج وللتجفيف بورقة من الجرائد ، وتنظيف الاسطح الزجاجية للمنضدة باستعمال عصير ليمون ودعكها ثم تجفيفها بفوطة ورقية. ويمكن استعمال معجون الاسنان فى ازالة الخدوش الصغيرة من الزجاج .
    لتنظيف الاثاث استعمال منظف على قليل من نشادر ، عدم وضع الاثاث فى أشعه الشمس فالشمس تجفف الأثاث ، للتخلص من الحلقات التى تكون على المنضدة بقليل من المنظف مع النشادر ثم مسحها بفوطة جافة ثم تلميعها بالملمع .

    ReplyDelete
  2. This article I expectation will be most useful and give you important knowledge on guarding your own data and companions! Spread the news! read someones facebook messages

    ReplyDelete
  3. If you are facing any problem regarding the Gmail, just visit the given link-
    Gmail Customer Support

    ReplyDelete

  4. My brother recommended I might like this website. He was once totally right. This submit actually made my day. You cann't imagine just how so much time I had spent for this information! Thanks! fafsa login

    ReplyDelete
  5. I think the admin of this web page is really working hard in support of his web page, as here every material is quality based stuff.
    Jaipur Escorts

    ReplyDelete
  6. Book Aerocity Escorts Hot Girls at very affordable prices covering all independent Aerocity Escorts Service area at Urgently whatsapp/Call: 9873940964



    http://www.brightescorts.in/
    http://www.brightescorts.in/
    https://brightescorts0.webnode.com/
    http://brightescorts69.blogspot.in/2018/05/247-at-top-aerocity-escort-service.html
    https://www.linkedin.com/in/nikita-jain-a06030157/

    ReplyDelete
  7. Greeting to Neelam Sen Nehru Place Escorts Service has Open-Minded and Friendly Nehru Place Call Girls. Get complete ultimate satisfaction without any complexity Call 24/7 - 9999965857



    Nehru Place Escorts
    Nehru Place Escorts
    independent escorts in Nehru Place
    Escorts in Nehru Place

    ReplyDelete
  8. Mahipalpur Escorts Club offer luxury escort girls in Mahipalpur . We select only the cheap escorts in Mahipalpur, find your Sweet girl on Mahipalpur Escorts.Club. Browse through our Sexy selection of independent female escorts working in Mahipalpur. Click on the escort profiles to see their rates and further full details.




    Call Girls in Mahipalpur, Delhi
    Escorts in Mahipalpur
    Mahipalpur college call girls
    Beautiful Call Girls in Mahipalpur
    Punjabi Call Girls in Mahipalpur
    Call Girls in Hotels in Mahipalpur
    Call Girls in Mahipalpur, Delhi
    Escorts in Mahipalpur

    ReplyDelete
  9. Book the best valued Connaught Place escorts and call girls in Connaught Place Delhi 24/7 escort service to getting you escort service best experience with Connaught Place Escorts near you ready call girls service Connaught Place Book Me (9999965857). ✓Starting Rs 6000 ✓ No 1 #Delhi_NCR Models Agency ✓Free Room no fake Calls Please



    https://anushkaaggarwal.webnode.com/
    https://anushkaaggarwal69.weebly.com/
    https://anushkaaggarwal69.weebly.com/
    http://www.imxprs.com/free/anushkaaggarwal/anushkaaggarwal69
    http://anushkaaggarwal.blogspot.in/2018/04/who-is-independent-connaught-place.html
    http://anushkaaggarwal.blogspot.in/2018/04/who-is-independent-connaught-place.html
    https://sweetykymari002.wixsite.com/mysite
    http://anushkaaggarwal.webstarts.com/

    ReplyDelete
  10. Dipika Faridabad Escorts is a high class escort agency where you can find only the best escorts girls in Faridabad. 9711199012 Call us now to make your booking !


    Faridabad Escorts
    Escorts in Faridabad
    Faridabad Escorts Agency
    Escorts Girls in Faridabad
    Faridabad Escorts

    ReplyDelete
  11. Dipika Faridabad Escorts is a high class escort agency where you can find only the best escorts girls in Faridabad. 9711199012 Call us now to make your booking !



    Faridabad Escorts
    Escorts in Faridabad
    Faridabad Escorts Agency
    Escorts Girls in Faridabad
    Faridabad Escorts

    ReplyDelete
  12. Mahipalpur Escorts Club offer luxury escort girls in Mahipalpur . We select only the cheap escorts in Mahipalpur, find your Sweet girl on Mahipalpur Escorts.Club. Browse through our Sexy selection of independent female escorts working in Mahipalpur. Click on the escort profiles to see their rates and further full details.



    Beautiful Call Girls in Mahipalpur
    Punjabi Call Girls in Mahipalpur
    Call Girls in Hotels in Mahipalpur
    Call Girls in Mahipalpur, Delhi
    Escorts in Mahipalpur

    ReplyDelete
  13. Welcome to VIP Delhi call girls the escorts with the finest skills of love making. Through our site you can discover erotic dates with first class escorts for discreet and exclusive dates in Delhi ☎ 9711199012.



    http://www.delhi-call-girls.com/gallery.html
    http://www.delhi-call-girls.com/contact.html
    http://www.delhi-call-girls.com/gurgaon-call-girls-service.html
    http://www.delhi-call-girls.com/udaipur-escorts.html
    http://www.delhi-call-girls.com/noida-escorts.html
    http://www.delhi-call-girls.com/ghaziabad-escorts.html
    http://www.delhi-call-girls.com/call-girls-service-raipur.html
    http://www.delhi-call-girls.com/faridabad-escorts.html

    ReplyDelete
  14. Get your fantasy satisfy with genuine call girls ghaziabad.Take a look how to discover idealize Independent escorts services ghaziabad. Book Escorts in ghaziabad Now!

    Ghaziabad Escort
    modal call girls ghaziabad
    independent ghaziabad call girls
    house wife in ghaziabad

    ReplyDelete
  15. independceCnt escorts services and many others by lovely call girls in Ghaziabad associated with her are ready to provide erotic fun.call us 9873940964

    call girls ghaziabad
    female escorts ghaziabad
    independent ghaziabad escorts

    ReplyDelete
  16. preetkour Independent Escorts in jodhpur VIP Prominent Escort Service in jodhpur,You can make escort in jodhpur a slave for the night,Book her to make today around evening time more agreeable with sexual fun. call us 9711199012

    Jodhpur call girls
    Jodhpur college call girls
    Jodhpur escorts service

    ReplyDelete
  17. Get Stunning noida Escorts For All at very affordable prices covering all noida at Urgently book call girls whatsapp/Call 9873777170

    Escorts in noida
    Escorts service in noida

    ReplyDelete
  18. 09711199171 Eye-Catching Faridabad Escorts Gallery girls real sexy hot Soniabarta
    Call Girls in Faridabad
    Escorts in Faridabad
    independent in Faridabad
    housewife escorts in Faridabad
    Call Girls in Faridabad | Call Whatsapp 09711199171 | Faridabad Escorts

    ReplyDelete
  19. Visiy My Website link Click here - ##### Housewife Escorts in Faridabad ##### Faridabad Call girls | Sexy VIP Escorts in Faridabad
    Call Girls in Faridabad


    Visiy My Website link Click here - ##### Independent Escorts Service Faridabad ##### Priya choudhary Escorts in Faridabad

    Visiy My Website link Click here - ##### Escorts Faridabad ##### HI, Guys i am Priyachoudhary Call Girls

    Visiy My Website link Click here - ##### Russin Escorts Faridabad ##### HI, Guys i am Escorts in Call Girls in Faridabad

    Visiy My Website link Click here - ##### Call Girls Service Faridabad ##### Hello Guys i am College Call Girls in Faridabad

    Visiy My Website link Click here - ##### Call Girls in Faridabad ##### Hello to all of you i am Priyachoudhary Call Girls in Faridabad

    Visiy My Website link Click here - ##### College Call Girls Faridabad ##### I am a Call Girl in Faridabad My name Priyachoudhary

    Visiy My Website link Click here - ##### College Call Girls Faridabad ##### Smart CAll Girls in Faridabad Escorts

    Visiy My Website link Click here - ##### Escorts Service Faridabad ##### Female Escorts in Faridabad

    ReplyDelete
  20. Hi Friends I Am Lavina Khyati. I am a punjabi girl I Provide You Best And Cheap Ghaziabad Call Girls Service. I am attached to an Escorts agency, where Well Instructed And Experienced Call Girls provided In Ghaziabad, Who Spend Dazzling Moments With You. Just Log In To " Ghaziabadcallgirls.Com " Otherwise Call Us At 9899900591.
    Call Girls in Ghaziabad

    Ghaziabad call girl

    Call Girls Ghaziabad

    Ghaziabad escorts

    independent ghaziabad escorts

    independent call girl Ghaziabad

    Call Girls in Ghaziabad

    housewife call girls Ghaziabad

    ReplyDelete
  21. Hello guys, are you looking for fresh and lovely Rozy faces Delhi Escorts Service. Contact Us Without any hesitation Book here well educated and newly Call girls who can fulfill your all burning desire. log in our site http://shanvibhardwaj.in/gallery.html . or 9837940964
    Delhi Escorts

    Delhi Call Girls

    Call Girls Delhi

    Call Girls in Delhi

    Female Escorts Delhi

    Delhi Escorts Service

    Russian Call Girls Delhi

    Housewife Escorts Delhi

    ReplyDelete
  22. Hello i am anushka. i live in Mahipalpur Delhi. -- http://anushkaverma.com/ -- +91-9999965857 -- i offer hot Independent housewife through calls. i offer you different ways of pleasure contact for housewife escort service in your nearest location. both incall and outcall service available.
    Vasant Vihar Call Girls

    Mayur Vihar Call Girls

    Vasant Kunj Call Girls

    greater kailash Call Girls

    Indirapuram.htm Call Girls

    Mahipalpur Escorts

    Mahipalpur Call Girls

    Call Girls in Mahipalpur

    Independent escorts Mahipalpur

    ReplyDelete
  23. Hello friends. I am aliya Batra. Visit my Site = divas4u.com/gallery.html = to find best faridabad Escorts. Spend some time with me and through away your all sorrows forever. Call at 9999965857 for more details fix a lovely meeting with me and make your every moment unforgettable.
    Faridabad escorts

    Vaishali Escorts

    Saket Escorts

    Nehru Place Escorts

    Aerocity Escorts

    Connaught Place Escorts

    Independent Escorts Faridabad

    Faridabad Call Girls

    ReplyDelete
  24. Ghaziabad Escorts- Independent High Profile VIP Call Girls in Ghaziabad
    Call for hot and sizzling Ghaziabad Escorts Services of Call Girls, Independent Ghaziabad Escorts and stylish high class Ghaziabad call girls. The most .



    escorts in vasundhara
    call girls raj nagar extension
    kaushambi call girls
    vaishali escorts
    crossings republik escorts service
    indirapuram escort
    escorts vaishali
    independent escorts in gaur city
    pari-chowk escorts

    escorts in ghaziabad

    ReplyDelete
  25. Vaishali Escorts-High Profile Independent Vaishali Call Girl
    Vaishali escorts there are two categories of escorts in Vaishali agency escorts and independent escorts. Vaishali Call Girl, independent escorts in Vaishali



    vaishali escorts
    escorts in chanakyapuri
    call girls rajouri garden
    vasant vihar call girls
    indirapuram escorts service
    crossings republik escort
    escorts kaushambi
    independent escorts in raj nagar extension
    vasundhara escorts

    ReplyDelete
  26. To address individuals' monetary challenges, auto title credits have acted the hero. Individuals never again need to stress over their record in applying for advances. Auto title advances have developed as a decent contrasting option to individuals who have awful credit or no record of loan repayment. They simply need an auto to fit the bill for the credit. online car title loans chicago

    ReplyDelete
  27. Black Magic Specialist In Kanpur call now @ 8725088250 to solve you problem to related balck magic with our famous astrologer in kanpur by By Swami Rajendra ji give your a full satifiction of your problem and solve than by hand at time.

    http://blackmagicspecialistinkanpur22.blogspot.com/

    https://blackmagicspecialistinkanpur.wordpress.com/

    https://indiaastrologer2.kinja.com/

    https://indiaastrologer2.tumblr.com/

    ReplyDelete
  28. Mr.Ajay Shastri is a famous astrologer in Pune, the world's famous astrologer, Pune No. 1 astrologer in Pune, astrologer, best astrologer Pt by 100% Solutions. Contact Now Ajay Shastri Pune 7837827129.

    Astrologer In Pune

    https://astrologerinpunee.wordpress.com/

    https://astrologerinpunee.tumblr.com/

    https://imgur.com/2fgUhLf

    https://astrologerinpunee.quora.com/

    https://twitter.com/astrologer45

    http://astrologerpune.blogspot.com

    ReplyDelete
  29. The Escorts in Bandra are quite amazing in offering their excellent Bandra Escorts service with their perfect figures that would help me to achieve their dream in excitement. Many men across the country are visiting the Bandra Escorts city to have fun with the amazing and gorgeous female Escorts in Bandra.
    All Over Indian escorts
    High Class Bandra Escorts Service

    ReplyDelete
  30. If you are looking High Class Call Girls In Andheri then contact us. These services are available for you to 24*7. RiyaBhatt waiting you call contact by whatsapp and email, direct call fo RiyaBhatt.

    ReplyDelete
  31. Anushka Aerocity Escorts - Anushka is the top notched place for availing most reliable Aerocity escorts services. Make a call to our help-desk and we will be up to you within 30 minutes.
    aerocity escorts
    vasant vihar
    indirapuram escorts
    vaishali escorts
    paschim vihar
    kirti nagar escorts
    dwarka escorts
    mahipalpur escorts
    nehru place escorts

    ReplyDelete
  32. If you are looking for Delhi escorts call girls service or VIP call girls in Delhi we are able to deliver sexy Delhi call girls to you call on ModelsVila.
    Delhi Call Girls contact number
    Gurgaon Escorts
    Call Girls in Nehru Place
    Saket Escorts
    Escorts Service in Ghaziabad
    Faridabad Escorts
    Karol Bagh Escort
    Noida Escort Service

    ReplyDelete
  33. https://pauio.com/kor/ - 코리아카지노 /
    https://pauio.com/live/ - 라이브카지노 /
    https://pauio.com/world/ - 월드카지노 /
    https://pauio.com/super/ - 슈퍼카지노 /
    https://pauio.com/mka/ - M카지노 /

    ReplyDelete
  34. https://dancesweb.com/yesca/ - 예스카지노 /
    https://dancesweb.com/obama/ - 오바마카지노 /
    https://dancesweb.com/ - 슈퍼카지노/

    ReplyDelete
  35. https://stylebet77.com/yes/ - 예스카지노 /
    https://stylebet77.com/first/ - 퍼스트카지노 /

    ReplyDelete
  36. https://como79.com/yes/ - YES카지노 /
    https://como79.com/mcasino/ - M카지노 /
    https://como79.com/obama/ - 오바마카지노 /

    ReplyDelete
  37. https://custory.com/yescasino/ - YES카지노 /
    https://custory.com/obama/ - 오바마카지노 /
    https://custory.com/super/ - 슈퍼카지노 /
    https://custory.com/33casino/ - 33카지노 /

    ReplyDelete
  38. The consideration for it is that since most of the benefit tends to be personalized in quality. Have you fixed a supposition to the connection just of the Kolkata Escorts support? The Independent Kolkata Escorts are fine much experienced when it comes to go and she is sensitive of a lot of travel locations. This in no moving means that they are here to go injustice to the job as they make it a step that all the needs of the clients are taken care of. The offices which are immolated by them are something that you can hardly stay from your partners. They are the faultless repay to all your doubt and when you are with them, trust me you can go on to have all your fantasies in life fulfilled. She will take oversight of everything. If you are businessmen and need take of your guests during your material parties, then they will entertain them in the best possible manner. It is not only the single men, but wed men who are not satisfied with their wife are benefiting the Kolkata Escorts Services.

    ReplyDelete
  39. The consideration for it is that since most of the benefit tends to be personalized in quality. Have you fixed a supposition to the connection just of the Kolkata Escorts support? The Independent Kolkata Escorts are fine much experienced when it comes to go and she is sensitive of a lot of travel locations. This in no moving means that they are here to go injustice to the job as they make it a step that all the needs of the clients are taken care of. The offices which are immolated by them are something that you can hardly stay from your partners. They are the faultless repay to all your doubt and when you are with them, trust me you can go on to have all your fantasies in life fulfilled. She will take oversight of everything. If you are businessmen and need take of your guests during your material parties, then they will entertain them in the best possible manner. It is not only the single men, but wed men who are not satisfied with their wife are benefiting the Kolkata Escorts Services.

    ReplyDelete
  40. Considering the way that auto title advances are simple and quick options for monetary establishments, for example, banks and credit auto organizations, discovering answers for money related troubles have turned out to be less demanding for individuals. It is essentially why such advances have turned out to be imperative piece of society. Credits have moved toward becoming inside individuals' compass and have turned out to be more conceivable to address their issues at the most punctual conceivable time.Cash Advance Lemon-Grove

    ReplyDelete