Posts

Showing posts from November, 2020

Powershell Empire : Swiss-Army Knife for Windows Post-Exploitation (Part 1).

Image
Powershell Empire is powershell based post-exploitation agent and has an ability to execute powershell agent without needing powershell.exe and consisting variety of modules that can be deployed on exploitable windows machine. As of this post, I will share about Empire 3 based on Empire ( refer here ) which has been migrated to Python 3.x which has been actively maintain by BC-Security .  General Installation Process for Powershell-Empire Setting up Empire is pretty straight forward and based on your liking and platform. In Kali or Debian based OS, you can install the latest version by executing the following command: sudo apt install powershell-empire If you intended to clone th e repository using Git, execute the following command: git clone  https://github.com/BC-SECURITY/Empire.git cd Empire sudo ./setup/install.sh I never try using docker to deploy Empire. But, if you prefer using a pre-built docker container, follow the following procedure: docker pull bcsecurity/empire:{version}