crackmapexec with Empire + Deathstar

byt3bl33d3r / CrackMapExec

A swiss army knife for pentesting networks

BSD 2-Clause "Simplified" License

8.38k stars 1.64k forks source link

crackmapexec with Empire + Deathstar #225

Closed securityhawk closed 6 years ago

securityhawk commented 6 years ago

Hi Guys

Just wondering if anyone could lend a newbie a hand? I have installed Empire and Deathstar - Deathstar is listening fine through Empire.

I have tried Empires in built agent deployment / stagers but they don't seem to work.

I have read that I can use crackmapexec to stage an agent - does anyone have a spare moment to explain how this can be achieved?

Thanks

Phil

lsorenson-os commented 6 years ago

You can view the CrackMapExec modules currently avable using the --list-modules flag. One of them, you will notice, is empire_exec. You will need to modify the Empire REST API credentials in the cme.conf file, which can be located in a variety of places such as {install root}/cme/data/cme.conf. After creating a listener in Empire, you execute CME with the flag -M empire_exec and -o LISTENER=<listener name>, where is the Name you set for the Empire listener.

byt3bl33d3r commented 6 years ago

If you have questions about CME i suggest joining the #crackmapexec slack channel on bloodhoundhq.slack.com and ask them there. Please only open an issue ticket to report bugs.