Empire

USaBUSe Linux updates

10 March 2017 ~5 min By Rogan Dawes
Abuse Backdoor Build-It Conferences Empire Exploit Hardware Internals Linux Metasploit Programming Real-World Research Shells Tunnelling
(If you’re new to this project, read the intro first) For the past few months, I’ve been working on porting the USaBUSe stack from the custom hardware (AVR+ESP8266) to the Linux USB gadget stack. I wanted to make the techniques more accessible to people unfamiliar with embedded development, and I also wanted to take advantage of the variety of possibilities inherent in having a fully featured Linux environment to work in. I presented this work at HackCon in Norway.

Intercepting passwords with Empire and winning!

18 November 2016 ~5 min By symeon
Empire Windows Dll Injection Hooking
This is my password,” said the King as he drew his sword. “The light is dawning, the lie broken. Now guard thee, miscreant, for I am Tirian of Narnia. C.S. Lewis tl;dr You are part of the red team who’s just compromised the entire AD infrastructure. The blue team quickly changes the password, which is always recommended, but is this effective in preventing the red team from still inflicting damage?

Bringing the hashes home with reGeorg & Empire

11 February 2016 ~3 min By sara
Empire Post-Exploitation Powershell
Is not a hack until you are 3 tunnels deep – Ian de Villiers External assessments. It’s about not only finding flaws but also looking at ways you can chain lower and medium-level vulnerabilities together, to be utterly devastating and gain full access. After situational awareness phase, pulling in all of my reconnaisance scans and input, I was left with typical results one might expect: missing patches here, little misconfiguration there, the typical…