– Updated powerview.ps1
– Added situational_awareness/network/powerview/get_cached_rdpconnection
– Added situational_awareness/network/powerview/set_ad_object
– Added management/downgrade_account
– Added credentials/mimikatz/cache
Empire is a pure PowerShell post-exploitation agent built on cryptologically-secure communications and a flexible architecture. Empire implements the ability to run PowerShell agents without needing powershell.exe, rapidly deployable post-exploitation modules ranging from key loggers to Mimikatz, and adaptable communications to evade network detection, all wrapped up in a usability-focused framework.
Installation using git:
git clone https://github.com/PowerShellEmpire/Empire
python setup_database.py (for setup database)
Run the ./setup/install.sh script. This will install the few dependencies and run the ./setup/setup_database.py script. The setup_database.py file contains various setting that you can manually modify, and then initializes the ./data/empire.db backend database. No additional configuration should be needed- hopefully everything works out of the box.
Running ./empire will start Empire, and ./empire –debug will generate a verbose debug log at ./empire.debug. The included ./data/reset.sh will reset/reinitialize the database and launch Empire in debug mode.