Empire - Empire is a PowerShell and Python post-exploitatio

项目说明

Empire

This project is no longer supported

Empire is a post-exploitation 框架 that includes a pure-PowerShell2.0 Windows agent, and a pure Python 2.6/2.7 Linux/OS X agent. It is the merge of the previous PowerShell Empire and Python EmPyre projects. The 框架 offers cryptologically-secure communications and a flexible architecture. On the PowerShell side, Empire implements the ability to run PowerShell agents without needing powershell.exe, rapidly deployable post-exploitation modules ranging from key loggers to Mimikatz, and adaptable communications to evade 网络 detection, all wrapped up in a usability-focused 框架. PowerShell Empire premiered at BSidesLV in 2015 and Python EmPyre premeiered at HackMiami 2016.

Empire relies heavily on the work from several other projects for its underlying functionality. We ha to call out a few of those people we' with heavily here and ha author/reference link information in the 源码 of each Empire module as appropriate. If we ha to improperly cite existing or prior work, please let us know.

Empire is de by , , , r, , and .

Feel free to join us on Slack!

Install

To install, run sudo ./setup/install.sh script or use the corresponding docker image docker pull empireproject/empire.

There's also a quickstart here and full documentation here.

Quickstart

Check out the Empire wiki for instructions on getting started with Empire.

Contribution Rules

Contributions are more than welcome! The more people who contribute to the project the better Empire will be for e. Below are a few guidelines for submitting contributions.

* Beginning with 2.4, we will only troubleshoot issues for Kali, Debian, or Ubuntu. All other operating systems will not be supported. We understand that this is frustrating but hopefully the new docker build can provide an alternative.
* Submit pull requests to the de. After testing, changes will be merged to master.
* Depending on what you're working on, base your module on ./lib/modules/powershell_template.py or ./lib/modules/python_template.py. Note that for some modules you may need to massage the output to get it into a nicely displayable text format with Out-String.
* Cite previous work in the 'Comments' module section.
* If your script.ps1 logic is large, may be reused by multiple modules, or is updated often, consider implementing the logic in the appropriate data/module_source/* directory and pulling the script contents into the module on tasking.
* Use appro verbs.aspx) for any functions.
* PowerShell 2 compatibility is STRONGLY preferred.
* TEST YOUR MODULE! Be sure to run it from an Empire agent before submitting a pull to ensure e is working correctly.
* For additional guidelines for your PowerShell 代码 itself, check out the PowerSploit style guide.

项目信息

开发语言：PowerShell

Star 数：7854

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Empire is a PowerShell and Python post-exploitation agent.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。