Empire 7.1 & Starkiller 4.1 are LIVE for sponsors! 🚀
- Staging signatures cover full handshake
- Separate AES & HMAC keys
- Sharpire verifies server in staging
- Patched injection & file bugs
- C agent aligned with 7.x + Linux build fix
(Cont. below)
Using the Empire C2 on Hack Smarter's DarkHaven Range - Part 2 is now out. Once again I partner with @_Hubbl3 on how he would approach this Active Directory cyber range from Hack Smarter as a red team operator.
In addition, @Tyler_Ramsbey has generously donated a 12 month All Access voucher which I've added into the video as a giveway!
Go check out the vide here:
piped.video/HA_bMzlRJ9Y@EmpireC2Project@bcsecurity
Empire v6.6.0 sponsors early access is live!
- Brand New C Agent (Cpire)
- 49 new ATT&CK modules
- 8 new BOFs: unhook, patchit, AMSI/ETW bypass, credman, handlekatz, bofroast
- Tons of improvements and fixes!
github.com/BC-SECURITY/Empir…
Empire v6.5 is live!
- 8 new modules across BOF/C#/PS/Python
- New C stager + PIC shellcode compiler for stage0 agent injection
- Patchless AMSI & ETW bypasses
- New Jobs tab on the agent page for managing background jobs
- Python 3.14 support
github.com/BC-SECURITY/Empir…
Introducing Starkiller Assistant! Our new AI-powered helper for Empire operators. It's like Clippy, but for C2. After months of R&D, early testers describe it as "confidently wrong" and "worse than no help at all." We're so proud.
Empire 6.4 is now public! Here are just a few updates:
- Added C# spawn module
- Auto-install for plugin marketplace
- New task display with parameters
- Added "Rerun Task" to Agents and Plugins
- Added customizable table headers
- Added Debian 13 support
github.com/BC-SECURITY/Empir…
One of the biggest upgrades to our agents is nearing completion and can be tested on our main development branch available to Sponsors.
- Updated routing packets from RC4 to ChaCha20
- Brand new C# obfuscation and customizable XMLs
- Added mTLS support
github.com/BC-SECURITY/Empir…
Empire v6.2 is Out!
Here are a few of the updates:
- Go and C# Agent Improvements
- Clean & reset server options
- Added port normalization
- Allow X-Empire-Token for API access
github.com/BC-SECURITY/Empir…
Video: Introduction to Beacon Object Files (BOFs)! Executing native code in-memory and at runtime to improve red team stealth. 😎 We start small to understand Dynamic Function Resolution and create a small Empire module to call Win32 API functions! piped.video/p3fByg8pa1g
Looking for something to do this weekend? Check out the revamped Empire Ops I. Fully updated for Empire 6.0, this course will take your skills to the next level.
Already purchased the course? Spend some time with the updates; you always have access to the newest content
New Empire Release: v6.1.3 is LIVE!
What’s new:
- Fixed PowerShell agent’s base64 cookie bug in HTTP listener
- Updated module names & descriptions
- Filter modules by agent language
- Folder view for agent modules (👀 see it in action below)
#RedTeam#CyberSecurity#infosec
We’re excited to announce that Empire 6.0 is heading to @defcon demo labs!
Come see @_vinnybod and the crew showcase brand new features and upgrades.
#Defcon#dc33
Empire 6.1 is live!
- ARM64 support for Donut
- Added support for Ubuntu 24.04
- Fixed PowerShell launch issues on Linux
- Faster startup & testing with pyyaml C
- Simplified Docker builds
- Cleaner API and updated dependencies
github.com/BC-SECURITY/Empir…#RedTeam#Cybersecurity