Fixed so the agent should work on Windows 10 Pro Build 17134

EmpireProject / Empire

Empire is a PowerShell and Python post-exploitation agent.

http://www.powershellempire.com/

BSD 3-Clause "New" or "Revised" License

7.39k stars 2.81k forks source link

Fixed so the agent should work on Windows 10 Pro Build 17134 #1334

Open johan-lindahl opened 5 years ago

johan-lindahl commented 5 years ago

The changes should make the Empire agent to work again on Windows 10.

Tested on

Windows 10 Pro Build 17134 Windows 10 Home Build 17763

The change includes the following,

AMSI bypass, by Rasta Mouse (https://rastamouse.me) HTTPS fix by https://github.com/zinzloun Changed the stager and the agent so AMSI not trigger on "Invoke-Empire" Changed the launcher so AMSI not trigger on "amsiInitFailed".