EmpireProject / Empire

Empire is a PowerShell and Python post-exploitation agent.
http://www.powershellempire.com/
BSD 3-Clause "New" or "Revised" License
7.39k stars 2.81k forks source link

Feature request: run on connect #1299

Closed PabloBrusseel closed 5 years ago

PabloBrusseel commented 5 years ago

It would come in handy to specify one or more pre-configured modules that would run when the agents connect back to your Empire framework

ThePirateWhoSmellsOfSunflowers commented 5 years ago

Hi! There is a undocumented workaround to automatically run module on connect. Just try to set autorun as agent

(Empire) > usemodule powershell/collection/screenshot
(Empire: powershell/collection/screenshot) > 
(Empire: powershell/collection/screenshot) > set Agent autorun
(Empire: powershell/collection/screenshot) > 

It will automatically run the screenshot module for all the new agents.

:sunflower:

mr64bit commented 5 years ago

Hi Pablo, hope this worked for you. Closing issue.