• Stars
    star
    1,262
  • Rank 35,856 (Top 0.8 %)
  • Language Vue
  • License
    MIT License
  • Created about 4 years ago
  • Updated 3 months ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Starkiller is a Frontend for PowerShell Empire.

Donate Docs Twitter URL YouTube URL Discord Donate Blog Twitter URL Twitter URL YouTube URL Mastodon Follow Mastodon Follow Threads Threads LinkedIn

Starkiller

Starkiller is a Frontend for Powershell Empire. It is a web application written in VueJS. If you'd like to contribute please follow the Contribution guide. If you'd like to request a feature or report a bug, please follow the Issue template.

Getting Started

As of Empire 5.0 and Starkiller 2.0, you no longer need to install Starkiller or build it from source. It is prepackaged in Empire as a submodule and served via Empire's API.

Sponsors

Sponsorship and extra features

Sponsoring at the Individual level will give access to extra features. At the moment, the extra Starkiller sponsorship features include:

Dashboard

Graph View

Interactive agent shell

Process Browser

Modify Module Scripts

Enable/Disable modules

Proxy Management

There is also a collection of Empire plugins available via sponsorship.

Thanks to our sponsors the following features which started as sponsor features have been moved to the public and kali builds.

  • File browser
  • Popout windows
  • Chat widget
  • Bypass management
  • Malleable profile management

Build and run from source

Prerequisites:

  • Node.js 16+.
  • Yarn Currently it has been tested using Yarn 1.22.
yarn

Compile and hot-reload for development

yarn dev

Compile and minify for production

yarn build

Compatability Table

Note: As of Empire 5.0 and Starkiller 2.0, this compatability table is less relevant. Starkiller is now packaged in Empire as a git submodule and does not need to be installed separately.

Starkillerโ€™s new features occasionally depend on new functionality within Empire. Therefore, it is recommended that you follow this release table for syncing up your Starkiller and Empire versions. If you are using an older version of Empire, Starkiller will warn you when logging in, but will allow you to continue. If a there is a new minimum version of Empire required to get all the features out of Starkiller, we will do a minor version bump to Starkiller.

Starkiller Release Minimum Empire Version Notes
1.0.x 3.1.1 3.1.1 is the first version of Empire to include all the user endpoints necessary for Starkiller to function
1.1.x 3.1.5 3.1.5 updated the reporting endpoint to have the same result as running it in the CLI. Starkiller 1.1.x uses that reporting endpoint for the reporting tab
1.2.x 3.2.0 3.2.0 added an endpoint for users that is needed for the UI updates introduced in Starkiller 1.2.0
1.3.x 3.3.0 3.3.0 categorized all of the modules in Empire with corresponding MITRE techniques
1.4.x, 1.5.x 3.5.0 3.5.0 added real-time notifications for new listeners and agents
1.6.x, 1.7.x 3.7.0 1.6.0 was tested against Empire 3.7.0. There shouldn't be any breaking changes, but there were a lot of code changes.
1.8.x 4.0.0
1.9.x, 1.10.x, 1.11.x 4.1.0 The updated agent screen requires new endpoints in order to update fields on the 'view' tab
2.0.x, 2.1.x 5.0.0 Uses the new v2 api
2.2.x, 2.3.x 5.2.0 Requires the new plugin task endpoints
2.4.x 5.5.0 For sponsors, requires the checkin endpoints

Changelog

Detailed changes for each release are documented in the changelog.

Stay In Touch

License

MIT

Copyright (c) 2021 BC Security

More Repositories

1

Beginners-Guide-to-Obfuscation

PowerShell
972
star
2

Moriarty

Moriarty is designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential exploits for Privilege Escalation in Windows environments.
C#
344
star
3

Malleable-C2-Profiles

Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike & Empire.
281
star
4

Invoke-ZeroLogon

Invoke-ZeroLogon allows attackers to impersonate any computer, including the domain controller itself, and execute remote procedure calls on their behalf.
PowerShell
210
star
5

Invoke-PrintDemon

This is a PowerShell Empire launcher PoC using PrintDemon and Faxhell.
PowerShell
198
star
6

DEFCON27

DEFCON 27 slides and workshop materials.
129
star
7

Offensive-VBA-and-XLS-Entanglement

VBA
124
star
8

Long-Live-The-Empire

A comprehensive workshop aimed to equip participants with an in-depth understanding of modern Command and Control (C2) concepts, focusing on the open-source Empire C2 framework.
92
star
9

IronSharpPack

IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then reflective load the C# project.
Python
58
star
10

Empire-Cli

CLI Frontend for PowerShell Empire.
Python
44
star
11

Taming-Offensive-IronPython

This workshop is designed to provide you with a solid understanding of IronPython, its integration with the .NET framework, and how it can be used to interact with other .NET languages.
Python
28
star
12

Red-Team-Village-CTF-2023

Secure Terminal CTF Challenge for DC31 Red Team Village
Python
20
star
13

SocksProxyServer-Plugin

Socks Proxy Server Plugin for Invoke-SocksProxy
17
star
14

DeathStarPlugin

Deathstar is an Empire plugin that automates gaining Domain and/or Enterprise Admin rights in Active Directory environments using common offensive tactics, techniques, and procedures (TTPs).
Python
15
star
15

empire-docs

https://bc-security.gitbook.io/empire-wiki/
10
star
16

DEFCONSafeMode

DEFCON Safe Mode Slides
8
star
17

DEFCON24

DEFCON 24 slides and materials.
5
star
18

ChiselServer-Plugin

4
star
19

Twilio-Plugin

Python
2
star
20

Empire-Launcher

Python
1
star
21

denylist-plugin

1
star
22

Report-Generation-Plugin

Plugin for replacing the original reporting functionality in Empire with customizable PDFs.
Python
1
star
23

AutoRun-Plugin

Plugin to automatically execute an agent tasking on checkin
1
star