PowerShell Empire Web utilizes the Empire REST API Server. It is a web interface for using PowerShell Empire.
This version of Empire Web only works with Empire 1.6. A new version is under development which will support Empire 2.0. Expected release is before end of June 2017. Empire Web Dev: https://github.com/interference-security/empire-web/tree/dev
Get PowerShell Empire: https://github.com/EmpireProject/Empire
./empire --headless --restport port --username empire_username --password empire_password
If you are unable to authenticate to Empire Web, most likely it is due to a bug in Empire and not "Empire Web". Please refer the pull request here: EmpireProject/Empire#329
You can fix it by making the changes mentioned here: https://github.com/EmpireProject/Empire/pull/329/commits/9bbcb0d7ce11adfad7ae500d63e91b9950d74150
PHP Curl should be installed to use Empire Web.
sudo apt-get install php5-curl
Command Line:
root@kali:~# php -i | grep -i curl
/etc/php5/cli/conf.d/20-curl.ini,
curl
cURL support => enabled
cURL Information => 7.47.0
PHP Script:
<?php
echo (function_exists('curl_version') ? "Curl found": "Curl not found");
?>
CSRF protection has not been implemented because it was affecting the working of Empire Web. It will be implemented in the next release.
Stay Calm. Stay Secure. Contribute :)