A few weeks ago Carrie Roberts submitted a "resource files" PR to Empire Dev which has since been merged into master, or version 2.3. These resource files work much the same way as they do in Metasploit, where you can define actions on startup and for initial agent check-ins. This PR came around the same …
A review of Athena, the CIA's RAT, its features, and how it compares to Empire
[Originally posted on ImplicitDeny] - This write up is for Empire 1.5, but the same concepts and commands are the same. In Part One we went over the reasons for having a resilient C2 infrastructure, and what it should look like. In summary, we want to have two or more internet accessible servers to host the different …
Continue reading Rome Didn’t Fall in a Day: Building A Resilient Empire C2, Part Two
Now that the Empire project has released the Dropbox Listener module to public with v2, let's get it setup. For those organizations that are not blocking Dropbox, this is an excellent and highly reliable C2 channel. It can probably go without saying that one of the coolest things about this module is that the attacker network is …
bneg 