Friday, March 10, 2017

EmpirePanel : Hack with Friends!

Intro:

You may be familiar with what was once called "PowerShell Empire", and is now referred to simply as "Empire".  It's the hot new post-exploitation framework with a lot of fancy features.  One major drawback, however, is that Empire lacks any real multiplayer support.  I noticed that Empire is, at its core, a Flask app, so why the hell not extend it into a fully functional web interface for collaborative hacking?


Goals:

  • A nice, pretty, web interface for Empire
  • Mulitplayer support
  • Functional parity with command line version
  • Minimal invasiveness to the existing Empire code base


High Level Architecture:

EmpirePanel is based on AdminLTE, and is decorated with AngularJS.  It is implemented entirely in HTML and JavaScript except for a minor tweak to enable the new routes in the core Empire code.  All interaction with Empire is done with JavaScript via the provided Empire API.


Walkthrough:

git clone https://github.com/pierce403/EmpirePanel.git
cd EmpirePanel/setup/
./setup_database.sh
./cert.sh
cd ..
./empire --rest --username admin --password admin

Then from a browser, visit https://127.0.0.1:1337/, and log in with the user/pass you set.

You should then be presented with a page looking like this:


Awesome, now lets start hacking.  First we need to create a listener.  I'm using 192.168.174.1 for this listener because that's the IP for my vmware host.


Great.  Now once we have the listener, we click into it, and generate a launcher:


This launcher is the command we run on our target system.  Once we run it, we see an agent pop up.



Okay, let's click into it and see what sorts of things we can do :





Things That Work:

  • Creating and destroying listeners
  • Generating a launchers
  • Collecting agents
  • Running shell commands on agents
  • Running modules on agents

Things That Don't Work Yet:

  • Some agent commands, like rename, ps, etc
  • UI layout consistency
  • AngularJS syncing issues

Fixing Things That Don't Work:

Of course, everything is on github (https://github.com/pierce403/EmpirePanel) and I accept pull requests.  All of my EmpirePanel work is concentrated on two files, empire.js, and index.html in the /static/ directory.

Future Plans:

This demo is only compatible with the 1.5 version of Empire.  Hopefully the API for 2.0 will stabilize soon and I'll be able to port it over, and hopefully, one day get the code upstream.  Maybe this work will simply inspire someone who knows what they're doing to come along and do it all the right way, who knows?  I guess that's all part of the magic of Open Source.  Enjoy!

25 comments:

  1. شركة تنظيف
    تهتم شركة قمم التميز باعمال وخدمات التنظيف فى اى مكان فى تنظيف الشقق – البيوت – شركة تنظيف منازل بالجبيل
    – المصانع واى مكان يحتاج الى اعمال التنظيف من اجل ان تساعد فى الوصول الى افضل ما تجدة من نتائج مميزة
    تنظيف يحتاج للاشياء معقدة من الادوات ، مثل الغرف المنزل لها ادوات التنظيف الخاصة، الصالون المدهب يحتاج لمنظف الخاص ، وسطح فى المنزل يتطلب مواد متخلفة ، فكثير من المنظفات المطلوبة حتى تكون عملية التنظيف سهلة ومن المنظفات : مبيض التواليت ، منظف الحمام، المطهرات ، المنظف للنوافذ والارضيات والغسيل ، سائل الغسيل و اعمال المنزل الصغيرة يمكن انجازاها بفوطة جافة ومنظف جيد ، المنظف المصنوع بقل الامكنيات ، معلقتين من الخل الابيض مع لتر من الماء الساخن وضعهم فى بخاخة . بيكربونات الصوديم لتنظيف البلاط يمكن مزج ثلاثه اجزاء من الماء الساخن مع جزء من الصودا لتنطيف الفرن والثلاجة ، وبيكربونات الصوديم بقليل من سائل الجلى يتكون معجون سميك صالح لتنظيف الحمام ، يمكن استخدام بيكربونات الصوديم وضعه فى صحن صغير ولطرد الروائح الكريهة من الثلاجة ، كربونات الصوديم فعالة فى ازالة البقع الدهنية لانها قلوية ويجب لبس قفازات لاستخدامها .
    شركة تنظيف بيارات بالقطيف
    الخل الابيض وعصير الليمون يمكن تنظيف السطوح الزجاجية والخشبية المصقولة ، ويمكن استخدام الخل الابيض والليمون للتخلص من الروائح الكريهة والتعطير .
    عند التنظيف يجب لبس القفازات لحماية الايدى من المواد المنظفه ، ويمكن لبس الفقازات عند غسيل الصحون وتكون مخصص لعمل فى المطبخ .
    شركة شفط بيارات بالقطيف
    والمنزل النظيفة من غير فوضوى أجمل بكثير وافضل ،وإذا توفر جميع الادوات النظافة داخل بيت تكون عمليه النظافة سهلة ،
    للتنظيف المنزل من اعلى الى اسفل ، اى تنظيف الغبار من اعلى الى اسفل ويمكن استخدام الاجهزة الكهربائية فى عملية التنظيف . شركة نقل اثاث بالجبيل
    تنظيف النوافذ باستخدام قطعة قطنية فى مسح الزجاج وللتجفيف بورقة من الجرائد ، وتنظيف الاسطح الزجاجية للمنضدة باستعمال عصير ليمون ودعكها ثم تجفيفها بفوطة ورقية. ويمكن استعمال معجون الاسنان فى ازالة الخدوش الصغيرة من الزجاج .
    لتنظيف الاثاث استعمال منظف على قليل من نشادر ، عدم وضع الاثاث فى أشعه الشمس فالشمس تجفف الأثاث ، للتخلص من الحلقات التى تكون على المنضدة بقليل من المنظف مع النشادر ثم مسحها بفوطة جافة ثم تلميعها بالملمع .

    ReplyDelete
  2. This article I expectation will be most useful and give you important knowledge on guarding your own data and companions! Spread the news! read someones facebook messages

    ReplyDelete
  3. If you are facing any problem regarding the Gmail, just visit the given link-
    Gmail Customer Support

    ReplyDelete

  4. My brother recommended I might like this website. He was once totally right. This submit actually made my day. You cann't imagine just how so much time I had spent for this information! Thanks! fafsa login

    ReplyDelete
  5. I think the admin of this web page is really working hard in support of his web page, as here every material is quality based stuff.
    Jaipur Escorts

    ReplyDelete
  6. Book Aerocity Escorts Hot Girls at very affordable prices covering all independent Aerocity Escorts Service area at Urgently whatsapp/Call: 9873940964



    http://www.brightescorts.in/
    http://www.brightescorts.in/
    https://brightescorts0.webnode.com/
    http://brightescorts69.blogspot.in/2018/05/247-at-top-aerocity-escort-service.html
    https://www.linkedin.com/in/nikita-jain-a06030157/

    ReplyDelete
  7. Greeting to Neelam Sen Nehru Place Escorts Service has Open-Minded and Friendly Nehru Place Call Girls. Get complete ultimate satisfaction without any complexity Call 24/7 - 9999965857



    Nehru Place Escorts
    Nehru Place Escorts
    independent escorts in Nehru Place
    Escorts in Nehru Place

    ReplyDelete
  8. Mahipalpur Escorts Club offer luxury escort girls in Mahipalpur . We select only the cheap escorts in Mahipalpur, find your Sweet girl on Mahipalpur Escorts.Club. Browse through our Sexy selection of independent female escorts working in Mahipalpur. Click on the escort profiles to see their rates and further full details.




    Call Girls in Mahipalpur, Delhi
    Escorts in Mahipalpur
    Mahipalpur college call girls
    Beautiful Call Girls in Mahipalpur
    Punjabi Call Girls in Mahipalpur
    Call Girls in Hotels in Mahipalpur
    Call Girls in Mahipalpur, Delhi
    Escorts in Mahipalpur

    ReplyDelete
  9. Book the best valued Connaught Place escorts and call girls in Connaught Place Delhi 24/7 escort service to getting you escort service best experience with Connaught Place Escorts near you ready call girls service Connaught Place Book Me (9999965857). ✓Starting Rs 6000 ✓ No 1 #Delhi_NCR Models Agency ✓Free Room no fake Calls Please



    https://anushkaaggarwal.webnode.com/
    https://anushkaaggarwal69.weebly.com/
    https://anushkaaggarwal69.weebly.com/
    http://www.imxprs.com/free/anushkaaggarwal/anushkaaggarwal69
    http://anushkaaggarwal.blogspot.in/2018/04/who-is-independent-connaught-place.html
    http://anushkaaggarwal.blogspot.in/2018/04/who-is-independent-connaught-place.html
    https://sweetykymari002.wixsite.com/mysite
    http://anushkaaggarwal.webstarts.com/

    ReplyDelete
  10. Dipika Faridabad Escorts is a high class escort agency where you can find only the best escorts girls in Faridabad. 9711199012 Call us now to make your booking !


    Faridabad Escorts
    Escorts in Faridabad
    Faridabad Escorts Agency
    Escorts Girls in Faridabad
    Faridabad Escorts

    ReplyDelete
  11. Dipika Faridabad Escorts is a high class escort agency where you can find only the best escorts girls in Faridabad. 9711199012 Call us now to make your booking !



    Faridabad Escorts
    Escorts in Faridabad
    Faridabad Escorts Agency
    Escorts Girls in Faridabad
    Faridabad Escorts

    ReplyDelete
  12. Mahipalpur Escorts Club offer luxury escort girls in Mahipalpur . We select only the cheap escorts in Mahipalpur, find your Sweet girl on Mahipalpur Escorts.Club. Browse through our Sexy selection of independent female escorts working in Mahipalpur. Click on the escort profiles to see their rates and further full details.



    Beautiful Call Girls in Mahipalpur
    Punjabi Call Girls in Mahipalpur
    Call Girls in Hotels in Mahipalpur
    Call Girls in Mahipalpur, Delhi
    Escorts in Mahipalpur

    ReplyDelete
  13. Welcome to VIP Delhi call girls the escorts with the finest skills of love making. Through our site you can discover erotic dates with first class escorts for discreet and exclusive dates in Delhi ☎ 9711199012.



    http://www.delhi-call-girls.com/gallery.html
    http://www.delhi-call-girls.com/contact.html
    http://www.delhi-call-girls.com/gurgaon-call-girls-service.html
    http://www.delhi-call-girls.com/udaipur-escorts.html
    http://www.delhi-call-girls.com/noida-escorts.html
    http://www.delhi-call-girls.com/ghaziabad-escorts.html
    http://www.delhi-call-girls.com/call-girls-service-raipur.html
    http://www.delhi-call-girls.com/faridabad-escorts.html

    ReplyDelete