|
| 1 | +# Changelog |
| 2 | +All notable changes to this project will be documented in this file. |
| 3 | + |
| 4 | +The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), |
| 5 | +and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). |
| 6 | + |
| 7 | +## [Unreleased] |
| 8 | +- Updated changelog to use [Keep a Changelog](https://keepachangelog.com/en/1.0.0/) (@Vinnybod). |
| 9 | + |
| 10 | +## [4.4.1] - 2022-03-06 |
| 11 | +- Fixed agent generation with custom headers (@Hubbl3) |
| 12 | +- Fixed missing quote in get_users.yaml (@Cx01N) |
| 13 | +- Fixed displaying info for plugins (@Cx01N) |
| 14 | +- Fixed legacy plugin loading to ignore folders (@Cx01N) |
| 15 | +- Removed http_mapi.ps1 |
| 16 | +- Removed comment that global obfuscation and keyword obfuscation cannot be combined (@Cx01N) |
| 17 | + |
| 18 | +## [4.4.0] - 2022-02-14 |
| 19 | +- Added auto copy to clipboard feature (@Cx01N) |
| 20 | +- Added directory settings to yaml for downloads/stagers/obfuscated_modules (@Cx01N) |
| 21 | +- Added C# process injection module (Cx01N) |
| 22 | +- Added bypass yamls for PowerShell (@Hubbl3) |
| 23 | +- Added Black and Isort integration (@Vinnybod) |
| 24 | +- Added tests for loading and generating scripts with defaults (@Vinnybod) |
| 25 | +- Updated Psinject to use updated version of reflective pick and bypasses (@Hubbl3) |
| 26 | +- Fixed check for preobfuscation of files (Cx01N) |
| 27 | +- Fixed issue with plugins using tuple (@Vinnybod) |
| 28 | +- Removed random capitialization function for listeners (@Cx01N) |
| 29 | +- Removed meterpreter and mapi listeners (@Cx01N) |
| 30 | +- Powerview - added functions for group managed service accounts and fine grained pw pol (@jfmaes) |
| 31 | + |
| 32 | +## [4.3.3] - 2022-01-24 |
| 33 | +- Added a hook for when an agent is fully checked in (stage2) (@Vinnybod) |
| 34 | + |
| 35 | +## [4.3.2] - 2022-01-14 |
| 36 | +- Fixed issues with variables names in Mimikatz & Privesc modules (@sbrun) |
| 37 | +- Fixed issue with Invoke-Obfuscation not being properly called (@Cx01N) |
| 38 | +- Add dotnet install to dockerfile (@Vinnybod) |
| 39 | + |
| 40 | +## [4.3.1] - 2022-01-08 |
| 41 | +- Fixed issue with module variables referenced before assignment or undefined (@Vinnybod) |
| 42 | +- Fixed bug with Invoke-Seatbelt caused by variable name mismatch (@Vinnybod) |
| 43 | +- Fixed IronPython exit/shutdown issue (@Cx01N) |
| 44 | +- Fixed ToLower() bug in PowerShell agent when using route (@CyrilleFranchet) |
| 45 | +- Fixed multiline shell output bug (#491) (@CyrilleFranchet) |
| 46 | +- Added dir command to the file browser hook (@CyrilleFranchet) |
| 47 | +- Generate test account with secure rng (@moloch--) |
| 48 | +- Add Invoke-FodhelperProgIDs module (@m1m1k4tz) |
| 49 | +- Add Invoke-VeeamGetCreds module (@sadshade) |
| 50 | + |
| 51 | +## [4.3.0] - 2021-12-23 |
| 52 | +- Updated Invoke-Seatbelt, Invoke-Rubeus, & Invoke-WinPeas (@Cx01N) |
| 53 | +- Updated C# modules: Seatbelt, SharpSploit (@Cx01N) |
| 54 | +- Updated profiles to include APT29 (@Cx01N) |
| 55 | +- Updated Mimikatz to 20210810-2 (@Cx01N) |
| 56 | +- Updated reset script to remove c# tasks and generated-stagers (@Cx01N) |
| 57 | +- Added obfuscation options into Empire CLI (@Cx01N) |
| 58 | +- Added Invoke-BOF module (@Cx01N) |
| 59 | +- Added C# server plugin to run on startup (@Cx01N) |
| 60 | +- Added autostart plugin with options to config file (@Cx01N) |
| 61 | +- Added upload & download options for Empire CLI (@Cx01N) |
| 62 | +- Added Plugin folders and extensions (@Cx01N) |
| 63 | +- Added C# redirector (@Cx01N) |
| 64 | +- Added Invoke-DownloadFile (@Cx01N) |
| 65 | +- Added error message in client for file downloads >1MB (@Cx01N) |
| 66 | +- Moved NVNC and Sharpire as C# submodules (@Cx01N) |
| 67 | +- Fixed Invoke-Assembley (@Cx01N) |
| 68 | +- Fixed osx/clipboard & pilliageuser modules (@Cx01N) |
| 69 | +- Removed unused wiki workflows (@Cx01N) |
| 70 | + |
| 71 | +## [4.2.0] - 2021-11-01 |
| 72 | +- Added revershell & cmd launchers with reversehell (@Cx01N) |
| 73 | +- Added ironpython to compile through empire with embedded std lib (@Cx01N) |
| 74 | +- Added proxy (SOCKS/TOR/HTTP) pivots to python agents (@Cx01N) |
| 75 | +- Added notifications in bottom toolbar for plugins and agents (@Cx01N) |
| 76 | +- Added C# VNC server (@Cx01N) |
| 77 | +- Added extended rights for certificate templates (@daem0nc0re) |
| 78 | +- Added donut for shellcode generation (@Cx01N) |
| 79 | +- Updated WMI persistence and bug fixes (@janit0rjoe) |
| 80 | +- Updated covenant compiler (@Hubbl3) |
| 81 | +- Updated csharp powershell launcher to compile through empire (@Hubbl3) |
| 82 | +- Fixed formatting error in enable_rdp (@jamarir) |
| 83 | +- Fixed nim launcher to run internal to exe (@Cx01N) |
| 84 | +- Fixed misc python module errors (@Cx01N) |
| 85 | +- Fixed outfile message displaying wrong directory (@Cx01N) |
| 86 | +- Removed sRDI for shellcode (@Cx01N) |
| 87 | + |
| 88 | +## [4.1.3] - 2021-09-28 |
| 89 | +- Fixed output from files throwing a error for the client (@Cx01N) |
| 90 | + |
| 91 | +## [4.1.2] - 2021-09-21 |
| 92 | +- Removed pyminifier as a dependency to prevent install errors (@Cx01N) |
| 93 | + |
| 94 | +## [4.1.1] - 2021-09-20 |
| 95 | +- Add OutputFunction to dcsync_hashdump (@jamarir) |
| 96 | +- Convert file operations to use with syntax (@jamarir) |
| 97 | +- Added Invoke-IronPython3 and some OffensiveDLR fixes (@Cx01N) |
| 98 | +- Fix for (#476) - String indices error ms16-032 & ms16-135 (@Cx01N) |
| 99 | +- Fix help menu text on the interact menu (@archcloudlabs) |
| 100 | +- Rework agent taskings in the client to not poll for a result (@Cx01N) |
| 101 | +- Added Python agents to the external/generate_agent module (@Cx01N) |
| 102 | +- Update add_sid_history module command (@ilanisme) |
| 103 | + |
| 104 | +## [4.1.0] - 2021-08-29 |
| 105 | +- Correct issue where install script would break depending on the current working directory (@Vinnybod) |
| 106 | +- Empire client now currently refreshes listener list after killing a listener (@Vinnybod) |
| 107 | +- Removed the wiki and added a link to the new docs (@Vinnybod) |
| 108 | +- Added the initial filtering/hooking feature (@Vinnybod) |
| 109 | +- Fix an issue where the docker builds would not run because it was deleting the database (@Vinnybod) |
| 110 | +- Added autocomplete for taskings in the Empire Client and added a command to view a specific task (@Cx01N) |
| 111 | +- Updated the OutputFunction feature to allow for arbitrary values (@Vinnybod) |
| 112 | +- Added an IronPython3 agent (@Cx01N) |
| 113 | + |
| 114 | +## [4.0.2] - 2021-08-16 |
| 115 | +- Added socketio messages to screenshot/download/upload (@Cx01N) |
| 116 | +- Added help message when no input is given to empire.py (@Cx01N) |
| 117 | +- Fixed missing slash for module directories (@Cx01N) |
| 118 | +- Fixed modules Get-SQLServerLoginDefaultPw and PortScan (@jamarir) |
| 119 | +- Fixed formatting bug in the options table on the listener menu (@Vinnybod) |
| 120 | +- Fixed querying retain-last-value config parameters (@ilanisme) |
| 121 | +- Fixed invalid concat on keylogs (@Cx01N) |
| 122 | +- Fixed mimikatz command and added suggested values (@Cx01N) |
| 123 | +- Fixed misc bugs (@Vinnybod) |
| 124 | +- Updated suggested values for stagers and reformatted code (@Cx01N) |
| 125 | +- Updated editlistener menu (@Vinnybod) |
| 126 | +- Removed client suppression for job started taskings (@Cx01N) |
| 127 | + |
| 128 | +## [4.0.1] - 2021-07-19 |
| 129 | +- Added API endpoints for sleep/jitter to agents (@Cx01N) |
| 130 | +- Added sleep command to CLI (@Cx01N) |
| 131 | +- Added sleep/jitter option to C# agents (@Hubbl3) |
| 132 | +- Fix for Invoke-Obfuscation installation |
| 133 | +- Added PrintNightmare module (@Cx01N) |
| 134 | + |
| 135 | +## [4.0.0] - 2021-06-28 |
| 136 | +### Breaking Changes |
| 137 | +- Removed old Empire CLI and cmdloop from server (@Cx01N) |
| 138 | +- The credential create endpoint now accepts a single credential instead of a list |
| 139 | +- Some endpoints which were previously throwing 500s when not found, now properly return a 404 |
| 140 | +- Plugin endpoints and socketio channels renamed to plural (plugin -> plugins) to match naming convention of other resources (@Vinnybod) |
| 141 | + |
| 142 | +### New Features |
| 143 | +- Integrated server and client into Empire (@Cx01N, @Vinnybod) |
| 144 | +- Introduced C# agents (@Hubbl3) |
| 145 | +- Integrated Covenant Roslyn compiler for task compilation (@Hubbl3) |
| 146 | +- Covenant Task compatibility (@Hubbl3, @Vinnybod) |
| 147 | +- Added support for 'suggested values' on the server and auto completing the suggested values in the CLI (@Vinnybod) |
| 148 | +- Added new launch parameters for starting server/client (@Cx01N, @Vinnybod) |
| 149 | +- Added Offensive DLR Modules: IronPython, ClearScript, & Boolang (@Cx01N) |
| 150 | +- Added MS16-051 stager (@Cx01N) |
| 151 | +- Added Start-ProcessAsUser module (@Cx01N) |
| 152 | +- Added NTLM-Extract module (@Cx01N) |
| 153 | +- Added Invoke-SharpSecDump module (@Cx01N) |
| 154 | +- Added sriptimport and scriptcommand to API (@Cx01N) |
| 155 | +- Added auto generate certificate function to startup script (@Cx01N) |
| 156 | +- Added Invoke-SpoolSample (@Cx01N) |
| 157 | +- Added redirector chaining and proper tunneling (@Cx01N) |
| 158 | +- Updated pycrypto to pycryptodome (@Cx01N) |
| 159 | +- Updated PowerDump with AES NTLM hashes (@Cx01N) |
| 160 | +- Updated cert/install/reset script with new directories (@Cx01N) |
| 161 | +- Updated all modules to new YAML format (@Vinnybod, @Cx01N) |
| 162 | +- Updated to Mimikatz 2.2.0 20210531 X11 RDP Clients (@Cx01N) |
| 163 | +- Removed M2Crypto dependency (@Cx01N) |
| 164 | +- Simplified kill/remove commands and added 'all' and 'stale' options (@Cx01N) |
| 165 | +- Removed the need for manual database timestamp updates, merge taskings and results table to a single table (@Vinnybod) |
| 166 | +- Added a socketio event for when tasking results come back (@Vinnybod) |
| 167 | +- Readded rastamouse's bypass (@Cx01N) |
| 168 | +- Added a 'since' query parameter to the tasks endpoint for more efficient querying (@Vinnybod) |
| 169 | +- Added socketio tasking event handler to CLI for displaying task results in the interact menu (@Vinnybod) |
| 170 | +- Install script prompts for xar, bomutils, openjdk, and dotnet for a more streamlined install (@Vinnybod) |
| 171 | +- Install script now includes dotnet (@Vinnybod) |
| 172 | +- Dockerfile size decreased by ~1GB by only installing the essentials. There is a note in the README (@Vinnybod) |
| 173 | +- Made powershell bypasses dynamic. Now set with a single field `Bypasses` and they will be applied in the order provided (@Vinnybod) |
| 174 | +- Added API endpoints for managing bypasses (@Vinnybod) |
| 175 | +- Add processor architecture to powershell, csharp, and python agents (@Vinnybod) |
| 176 | +- Add a display command to interact menu (@Vinnybod) |
| 177 | +- Add additional endpoints for credential for get, update, and delete (@Vinnybod) |
| 178 | +- Add create, update, remove credential functionality to the CLI (@Cx01N) |
| 179 | +- Add an "output function" option on several modules (@jamarir) |
| 180 | +- Updated shellcoderdi to newest version (@Cx01N) |
| 181 | +- Added a Nim launcher (@Hubbl3) |
0 commit comments